The sorry state of skill distribution

Tests found that new “skill scanners” meant to detect malicious agent skills can be easily bypassed on ClawHub, skills.sh, and Cisco’s skill-scanner using simple tricks like file truncation, hidden payloads in .docx or poisoned .pyc files, and prompt injection. The article concludes public skill marketplaces are unsafe for sensitive use and recommends curated, controlled skill sources instead.