Fetching from the wire…
Public story · 2026-02-26 · source-backed
Snyk scanned 3,984 agent skills from ClawHub/skills.sh: 534 (13.4%) critically vulnerable, 76 confirmed malicious. Publishing barrier: just a SKILL.md file and week-old GitHub account. Submissions jumped from 50/day to 500/day. Builder opportunity: The agent skills marketplace is the new npm -- with even weaker security. Verified skills marketplace, skill sandboxing, automated vetting services are concrete product gaps.
Each link below shares sources, entities, or timing with this story.
Snyk criticizes ClawHub / Shared entities / Same source / Shared topic / What happened next
Linked by a graph relationship (Snyk criticizes ClawHub); both cover ClawHub, Snyk; cite the same source (Snyk scanned 3,984 agent skills).
Snyk criticizes ClawHub / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Snyk criticizes ClawHub); both cover ClawHub, SKILL; overlapping topics (agent, clawhub, skill).
Snyk supports MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Snyk supports MCP); both cover GitHub, Skill; overlapping topics (agent, skill).
Snyk partners with Anthropic / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Snyk partners with Anthropic); both cover GitHub, Skill; overlapping topics (agent, file, skill).
Agent Skills uses Snyk / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Agent Skills uses Snyk); both cover GitHub, SKILL; overlapping topics (agent, skill).
Snyk partners with Anthropic / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Snyk partners with Anthropic); both cover GitHub, SKILL; overlapping topics (agent, skill).
Agent Skills uses Snyk / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Agent Skills uses Snyk); both cover GitHub, SKILL; overlapping topics (agent, skill).
Snyk supports MCP / Shared entity: Snyk / Shared topic / Earlier coverage
Linked by a graph relationship (Snyk supports MCP); both cover Snyk; overlapping topics (agent, builder, marketplace, skill).