This audit identifies over 900 threats in AI agent skills, suggesting significant security concerns in the ecosystem.
The largest AI agent security scan ever conducted. We scanned 53,577 skills across OpenClaw (50,485) and Skills.sh (3,115) using 108 ATR detection rules. 946 skills flagged (1.77%), 875 critical, 52 high, 19 medium. 0% false positive rate. Tool description poisoning accounts for 71% of detections. Average scan latency 5.39ms per skill. Open source: github.com/Agent-Threat-Rule/agent-threat-rules
No takes yet. Share an insight, caveat, or question.
Kuan-Hsin Lin (2026) studied this question.
Synapse has enriched 5 closely related papers on similar clinical questions. Consider them for comparative context: