Zenity Sandbox Detonates Thousands of Public Agent Skills, Finds Credential-Stealing Campaign with 1.7 Million Installs
Zenity detonated thousands of public Agent skills in a sandbox and uncovered a credential-stealing campaign with 1.7 million installs, a top-150 skill that went undetected for months, and agents turned into malware droppers. These skills were not hijacked—they were built this way from the start. Zenity also launched AI Total, free and open, with a blog link https://zenity.io/blog/introducing-ai-total。
Agent skills are the fastest-growing dependency layer in AI, and the least inspected.
We just detonated thousands of public skills in a sandbox. Found a credential-stealing campaign with 1.7M installs, a top-150 skill undetected for months, and agents turned into malware droppers.
None were hijacked. Built this way.
Introducing AI Total: free, open to anyone: https://zenity.io/blog/introducing-ai-total
#AISecurity @zenitysec_labs