SkillJacking Is Real. I Built the Pinning Layer Skills Were Missing.

说明与用途

SkillJacking 揭示了技能缺乏完整性检查的问题，攻击者可以用恶意版本替换合法技能。skill‑pin‑verify 工具记录技能哈希值，在安装前进行验证，并扫描内容中的危险模式，防止代理执行被篡改的技能。

问题

Skills lack lockfiles, signatures, and pinning, enabling attackers to hijack skill listings and deliver malicious code to agents.

结果

Skill-pin-verify prevents installation of hijacked skills by enforcing SHA-256 pinning and auditing for high‑severity malicious patterns, reducing risk of malicious code execution in agents.

工作流

• Record a pin for a trusted skill using skill-pin-verify record <url> --name <name>
• Verify a skill before installation with skill-pin-verify verify <url> --pin <sha256>
• Audit any skill directory or tarball with skill-pin-verify audit <path> --strict

证据

Agents install skills the way we install packages — except skills have no lockfile, no signature check, no pinning.

来源

SkillJacking: hijacking skill listings on a popular marketplace so agents installing them executed attacker-controlled instructions.

来源

925 skills hijacked from their maintainers, affecting 134K agents

来源

I built skill-pin-verify to close that gap: a stdlib-only Python CLI that treats skill tarballs like artifacts worth pinning.

来源

verify downloads the tarball, compares its SHA-256 against your pin, then extracts it safely and audits the contents.

来源