A Hole in Every One: One Malicious Agent Skill Defeats All Eight Open-Source Skill Scanners
A Hole in Every One: One Malicious Agent Skill Defeats All Eight Open-Source Skill Scanners is a high-severity prompt injection issue in One Malicious Agent Skill Defeats All Eight Open-Source Skil, an AI agent.
Is One Malicious Agent Skill Defeats All Eight Open-Source Skil running on your developers' machines? Anomity finds every device with this AI agent installed, shows the version, and can block it by policy. Detect this across your developers' devices with Anomity →
Key facts
- ID
a-hole-in-every-one-one-malicious-agent-skill-defeats-all-eight-open- Severity
- high
- Attack type
- Prompt injection
- Component
- One Malicious Agent Skill Defeats All Eight Open-Source Skil · AI agent
- Known exploited
- No known exploitation
- Published
- Last verified
What is this vulnerability?
Adversa AI built a single malicious agent skill and ran it past all eight open-source AI skill scanners currently available. Every one passed it. The finding matters because skill scanning is the control most teams rely on when they let developers install community skills, so a uniform bypass means that control is providing assurance it cannot actually deliver.
Am I affected by this vulnerability?
You are affected if One Malicious Agent Skill Defeats All Eight Open-Source Skil is installed or configured on a machine. Check the references for the exact versions.
How do I fix it?
Do not treat a clean skill-scanner result as approval. Govern skills by provenance instead: allowlist the publishers you trust, inventory every skill actually installed across the fleet, and alert on new skills appearing on a device rather than trying to detect malice in their content.
How do I find every machine running One Malicious Agent Skill Defeats All Eight Open-Source Skil?
Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run One Malicious Agent Skill Defeats All Eight Open-Source Skil and which version, then enforce a policy on it.