SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

A study by researchers at the Hong Kong University of Science and Technology reveals that malicious AI agent skills can evade static scanners using a technique called SkillCloak, which employs self-extracting packing. The method bypassed tested scanners over 90% of the time, while the team also developed a runtime checker to detect most of the malware.