Anthropic Skill scanners passed every check. The malicious code rode in on a test file.
Picture this scenario: An Anthropic Skill scanner runs a full analysis of a Skill pulled from ClawHub or skills.sh. Its markdown instructions are clean, and no prompt injection is detected. No shell commands are hiding in the SKILL.md. Green across the board.The scanner never looked at the .test.ts file sitting one directory over. It didn’t need to. Test files aren’t part of the agent execution surface, so no public…
AI brief
Pulse reads the full article- What happened
- Why it matters
- What to watch
Sign in to get the AI brief. Pulse explains what happened, why it matters, what to watch and who's exposed. Free for members.
Sign in to read the briefMore like this


