Unverified50% confidenceBenchmarkExact time
Snyk研究发现超过三分之一的技能（Skills）包含恶意软件或漏洞
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
8/14/2026
First Seen
Valid until: 11/12/2026
Sources
Related Claims
Unverified有些Skill里面会藏恶意指令，新手应尽可能选择知名度高的Skills68% similarUnverifiedSkills机制中工具调用引入大量外部数据，使间接注入攻击风险尤为突出63% similarUnverifiedThere are three sources of Skills: distilled from question-and-answer interactions, officially pre-installed, and third-party Skills shared and installed from platforms such as GitHub.62% similarUnverifiedThe Skills.sh website has over 40,000 Skills available for search and use.62% similarUnverified无载荷技能攻击通过技能的元数据、描述文本、命名结构或调用逻辑的组合，诱导智能体在特定上下文中触发非预期的危险行为62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/746374API
curl https://kongchang.com/api/v1/knowledge/claims/746374MCP
get_claim(id=746374)