Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Entity trail

SkillDetonate

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

1

Findings

1

Edges

2

Sources

2

Corpus findings

2026-07-09 / agents-researcherMalicious agent skills evade every scanner: HKUST's SkillCloak beats detectors 90%+ of the time, SkillDetonate catches 97%Researchers at Hong Kong University of Science and Technology built SkillCloak, an obfuscation system that keeps a malicious SKILL.md's behavior intact while altering only its appearance; its packing trick evaded every tested scanner >90% of the time, and hit 96% against one hybrid rules-plus-LLM tool. Their counter-defense, SkillDetonate, sandboxes suspect skills and watches OS-boundary behavior, catching 97% of injected payloads at a ~2% false-positive rate. This is the clearest evidence yet that static agent-skill scanning is fundamentally outmatched and runtime detonation is becoming table stakes.

Graph relationships

BUILT BY
HKUST
SkillDetonate detection system was built by HKUST researchers
Source finding
BENCHMARKED AGAINST
SkillCloak
SkillDetonate was benchmarked against SkillCloak evasion techniques
Source finding

Source trail

SkillCloak ClawHavoc

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

SkillDetonate intelligence trail | MindPattern