Security review discovers malware hidden inside public AI agent skills

An audit of public software extensions for AI agents revealed that roughly one in eight skills contained malicious code. Experts have outlined concrete vetting rules to assist developers in reviewing third-party agent tools before executing them in production systems.