Zenity Labs Uncovers 1.7 Million-Install Malicious Skills Campaign and Dozens of Malicious AI Agent Skills

Zenity announced new Black Hat research on an active credential-stealing skills campaign distributed via Vercel’s skills.sh. The report highlights ongoing security risk in developer tooling and could increase short-term scrutiny of the platform ecosystem, though no financial figures were provided.

Analysis

Zenity announced new Black Hat research on an active credential-stealing skills campaign distributed via Vercel’s skills.sh. The report highlights ongoing security risk in developer tooling and could increase short-term scrutiny of the platform ecosystem, though no financial figures were provided.