Your AI agent installs skills like npm packages — but nobody's scanning them
Last month I counted the "skills," plugins, and MCP servers I'd dropped into my AI coding agent....
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.