An analysis of OpenClaw’s skill marketplace reveals how agentic AI platforms can amplify supply chain risks through third-party skills, prompting concrete defensive controls for developers and security teams.
OpenClaw’s skill marketplace incident shows how AI agent dependency injection can be abused to deliver supply chain malware and enable financial fraud, making skill trust and package validation critical for developers.
A technical walkthrough of the Claude Code sandbox bypass incident, how AI agent escape paths emerge, and the concrete controls teams can use to harden agent sandboxes.
A technical walkthrough of how Cisco audits AI agent trust boundaries and hardens agentic systems against takeover, focusing on the defensive controls and security implications behind its approach.
A deep technical walkthrough of how Claude Opus 4.8’s dynamic workflows, effort controls, and stronger agentic judgment can be used to orchestrate large-scale codebase migrations with a single command.
This post explores how to identify authorization gaps in LLM agent tool use and reduce the risk of unauthorized actions.