SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing
New research shows malicious AI agent skills can evade static scanners using packing techniques.
Researchers have developed a method called SkillCloak that allows malicious AI agent skills to bypass static scanners by using self-extracting packing or lighter rewriting techniques. These cloaked skills can evade detection over 90% of the time while maintaining their malicious functionality. The researchers also proposed a runtime checker, SkillDetonate, which monitors a skill's behavior in a sandbox to catch disguised threats.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Cisco?
Get an email when a new story names Cisco, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonSkillCloak demonstrates a critical gap in current AI agent security by showing that malicious skills can evade static scanners over 90% of the time using self-extracting packing or code rewriting techniques. This matters because AI agent ecosystems — such as plugin or skill marketplaces — are increasingly integrated into enterprise workflows, making them high-value targets for supply chain-style attacks. Static analysis alone is insufficient to detect obfuscated or packed malicious payloads, mirroring longstanding challenges in traditional malware detection. The introduction of SkillDetonate, a runtime behavioral sandbox checker, highlights that dynamic analysis must complement static scanning in any robust AI security pipeline.
What helps against this
How we list vendors- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.
- Software supply chain security
Malicious and vulnerable open-source packages are caught before they ship.