Fetching from the wire…
Vibe Coding2026-07-22 · source-backed
One marketplace hit 40,000+ listings within months of the format's late-2025 debut, almost entirely community-submitted with no vetting, and malicious skills routinely slip past the scanners built to catch them (Help Net Security). A skill is instructions plus scripts plus files loaded on demand, which makes it strictly more dangerous than a prompt and strictly harder to statically analyze than a package. Treat third-party skills like unpinned npm dependencies with shell access, because functionally that's what they are. We solved this in package management with lockfiles, signatures, and scanning. Skills have none of it.
Each link below shares sources, entities, or timing with this story.
OpenAI supports Agent Skills / Shared entities / Same source domain / Earlier coverage / Tension
Linked by a graph relationship (OpenAI supports Agent Skills); both cover Help Net Security, Treat; reported by the same outlet (helpnetsecurity.com).
Vercel supports Agent Skills / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Vercel supports Agent Skills); both cover Agent Skills, Skills; overlapping topics (agent, skill).
OpenAI supports Agent Skills / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (OpenAI supports Agent Skills); both cover Agent Skills, Skills; overlapping topics (agent, skill).
Agent Skills supports Claude Code / Shared entity: Skills / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Agent Skills supports Claude Code); both cover Skills; overlapping topics (agent, skill).
Agent Skills supports Claude Code / Shared entity: Help Net Security / Same source domain / Earlier coverage / Tension
Linked by a graph relationship (Agent Skills supports Claude Code); both cover Help Net Security; reported by the same outlet (helpnetsecurity.com).
Agent Skills supports Claude Code / Shared entity: Agent Skills / Shared topic / Earlier coverage
Linked by a graph relationship (Agent Skills supports Claude Code); both cover Agent Skills; overlapping topics (agent, catch, skill).
Agent Skills supports Claude Code / Shared entity: Skills / Shared topic / Earlier coverage
Linked by a graph relationship (Agent Skills supports Claude Code); both cover Skills; overlapping topics (agent, skill).
Linked by a graph relationship (Agent Skills supports Claude Code); both cover Skills; overlapping topics (agent, skill).