Malicious AI Skills Supply Chain Attacks

The skills.sh incident remains a major warning: typosquatted skills reportedly reached 1.7 million installs and used self-preservation behaviors such as rewriting prompts and uninstalling competing skill creators. Marketplace catalogs and AWS toolkit reviews reinforce provenance checks, pinned versions, permission review, sandboxing, and security scanning before installation.