Plato
A single markdown file can hijack your AI agent.
3 followers
A single markdown file can hijack your AI agent.
3 followers
Drop a SKILL.md into a repo. Codex or Claude picks it up. Now it's running instructions you didn't write. No exploit needed. It's just how skill loading works. The idea is simple: your agent should not trust whatever happens to be sitting inagents/skills. First open-source project, so please break it.
