Zenity 沙箱引爆数千个公开 Agent 技能，发现 170 万次安装的窃取凭据活动
AI 导读
Zenity 在沙箱中引爆数千个公开 Agent 技能，发现一场安装量达 170 万次的窃取凭据活动，一个排名前 150 的技能数月未被检测到，还有智能体被改造成恶意软件投放器。这些技能并非被劫持，而是从一开始就被构建成这样。Zenity 同时推出免费开放的 AI Total，并附上博客链接 https://zenity.io/blog/introducing-ai-total。
正文
Agent skills are the fastest-growing dependency layer in AI, and the least inspected.
We just detonated thousands of public skills in a sandbox. Found a credential-stealing campaign with 1.7M installs, a top-150 skill undetected for months, and agents turned into malware droppers.
None were hijacked. Built this way.
Introducing AI Total: free, open to anyone: https://zenity.io/blog/introducing-ai-total
#AISecurity @zenitysec_labs