Attack
A booby-trapped skill, plugin or MCP server can lead an agent to run malicious code with the user's rights.
No flaw is needed: third-party content becomes a privileged instruction or code executed with your rights.
The CVERC advisory on skill poisoning dates from 22 April 2026, and the article that relayed it from 13 September.
Fake prerequisites and hostile scripts or binaries are the simplest and most observed mechanisms.
Only 76 skills were confirmed malicious by hand in the Snyk study, according to the author.