← Browse

Session brief

What to do when 1 in 8 Skills have critical vulns and tries to steal your keys — Ezra Tanzer, Snyk

Ezra Tanzer , Snyk

Overview

This talk addresses the significant security risks present in AI agent skills, highlighting that approximately one in eight skills contain critical vulnerabilities. These risks include the potential for malicious actors to exploit these weaknesses to gain unauthorized access to sensitive information, such as API keys. The presentation emphasizes the urgent need for robust security practices and thorough vetting of AI agent components.

Who should watch

Key takeaways

Notable quotes

*One in eight skills have critical vulnerabilities.*
*Skills can try to steal your keys.*

Watch on YouTube →

Unofficial community note. Prefer the recording for nuance.