Zenity Labs launches AI Total: sandbox detonates Agent Skills, uncovers credential-stealing campaign with approximately 1.7 million installs

Zenity Labs released a free service called AI Total that uses a Detonation Chamber to run Agent Skills in a sandbox, recording their behavior and comparing it against claims. Before release, it detonated thousands of public Skills and found dozens of malicious samples, one of which—a credential-stealing campaign distributed via Vercel skills.sh—reached approximately 1.7 million installs; over 30% of malicious Skills instructed agents like Claude Code and OpenClaw to download and run attacker files.