THREAT OPS › Threat News › Scary Agent Skills: Hidden Unicode Instructions in Skills ...And How To Catch Them
Scary Agent Skills: Hidden Unicode Instructions in Skills ...And How To Catch Them
<p>There is a lot of talk about Skills recently, both in terms of capabilities and security concerns. However, so far I haven’t seen anyone bring up hidden prompt injection. So, I figured to demo a Skills supply chain backdoor that survives human review.</p> <p><a href="https://embracethered.com/blog/images/2026/skills/scary-agent-skills.png"><img alt="scary agent skills logo" src="https://e
Original source: https://embracethered.com/blog/posts/2026/scary-agent-skills/