Agentic Skills | Episode 69

Agentic skills can make AI agents more capable and consistent—but they can also introduce serious security risks. This episode explains how skills work, why malicious skills rank as a leading OWASP concern, and how seemingly harmless Markdown instructions can enable credential theft, remote payload delivery, and manipulated recommendations. Real-world examples illustrate how malicious skills can evade scanners and exploit trusted marketplaces. The episode concludes with practical safeguards, including reviewing skill files, watching for external instructions and prompt injection, pinning versions, limiting permissions, and running agents inside isolated environments.

Links:

OWASP Agentic Skills Top 10

Malicious AI Agent Skill Bypasses Security Scans and Seizes Full Control of Over 26,000 Agents

(00:00) - Agentic Skills and the OWASP Top 10

(00:23) - Podcast Sponsors: BHIS and Antisyphon Training

(01:29) - What Is an Agentic Skill?

(03:13) - Skill Marketplaces and Widespread Adoption

(03:46) - Why Malicious Skills Are the #1 Risk

(05:50) - Remote Payloads and External Instructions

(07:00) - Malicious Skill Takes Control of 26,000 Agents

(08:09) - Money Radar and Manipulated Recommendations