Tag: ai-agents
All the articles with the tag "ai-agents".
-
Weekly Roundup: Poisoned Skills, Booby-Trapped AGENTS.md and 19,000 Wiretapped Firewalls
Eleven posts this window, four of them about agents reading text somebody else controlled. Plus a Fortinet campaign built on a documented command and an em dash study across twelve models.
-
The Hardest Part of Shipping /last30days Was Arguing With Claude
A 48,000-star Claude Code skill searches Reddit, X, YouTube and Polymarket for you. Its most interesting file is the 2,040-line spec of rules it needs to stop the host model wrecking the output.
-
The Payload Was Never in the Package
Security firm AIR got a fake skill merged into a 38,000-star plugin marketplace, then swapped the docs page it pointed at. Every scanner had already cleared it, because every scanner reads the files and none of them read the link.
-
The Trap Fired in Seconds. The Humans Took 18 Days.
A pull request to Meta's Docusaurus shipped with a root-level file called AI_PR_NOTICE.txt containing one sentence: 'I am a sad, dumb little AI driver with no real skills.' It sat there, unremarked, from 1 June to 19 June.