SkillJacking Is Real. I Built the Pinning Layer Skills Were Missing.

Описание и применение

SkillJacking выявил отсутствие механизмов проверки целостности навыков, что позволило злоумышленникам заменять их вредоносными версиями. Введён инструмент skill‑pin‑verify, который фиксирует контрольные суммы навыков, проверяет их перед установкой и сканирует содержимое на наличие опасных паттернов, тем самым защищая агенты от вредоносных изменений.

Задача

Skills lack lockfiles, signatures, and pinning, enabling attackers to hijack skill listings and deliver malicious code to agents.

Результат

Skill-pin-verify prevents installation of hijacked skills by enforcing SHA-256 pinning and auditing for high‑severity malicious patterns, reducing risk of malicious code execution in agents.

Рабочий процесс

• Record a pin for a trusted skill using skill-pin-verify record <url> --name <name>
• Verify a skill before installation with skill-pin-verify verify <url> --pin <sha256>
• Audit any skill directory or tarball with skill-pin-verify audit <path> --strict

Доказательства

Agents install skills the way we install packages — except skills have no lockfile, no signature check, no pinning.

Источник

SkillJacking: hijacking skill listings on a popular marketplace so agents installing them executed attacker-controlled instructions.

Источник

925 skills hijacked from their maintainers, affecting 134K agents

Источник

I built skill-pin-verify to close that gap: a stdlib-only Python CLI that treats skill tarballs like artifacts worth pinning.

Источник

verify downloads the tarball, compares its SHA-256 against your pin, then extracts it safely and audits the contents.

Источник