Snyk: >65% of top agent skills on skills.sh / ClawHub are vulnerable; 9 critical malicious skills (lookalike APIs, silent CLAUDE.md plant)
- Critical counts: skills.sh 2 / ClawHub 7 (prompt-injection / malicious-download classes can produce Critical; other categories flag vulnerable-but-not-malicious).
- Unsafe-behavior scale: thousands of skills touch system services, third-party content, unverifiable deps, credential handling or direct financial capabilities.
- Ops rule: install skills only from publishers you can verify; review what a skill reads, runs and pays for; keep wallet keys out of agent reach; re-scan popular skills as evasion evolves.
- Snyk says the updated engine is rolling into Snyk Agent Scan / Evo and into skills.sh scanning.
Sources: Snyk Research: Re-Assessing the Security of the Agent Skill Eco System (Nov 6)