The latest articles on DEV Community by 华诚 (@_0ae5dca97e251657f73267). https://dev.to/_0ae5dca97e251657f73267 https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3838296%2F6cf64ee2-842f-43ca-9ac8-6f8c687d0977.jpg https://dev.to/_0ae5dca97e251657f73267 en 华诚 Sun, 12 Apr 2026 11:10:45 +0000 https://dev.to/_0ae5dca97e251657f73267/newly-discovered-skills-this-week-2026-04-12-4op6 https://dev.to/_0ae5dca97e251657f73267/newly-discovered-skills-this-week-2026-04-12-4op6 <p><strong>54,764</strong> skills indexed, <strong>2105</strong> audited. Found <strong>172</strong> malicious, <strong>1012</strong> suspicious.</p> <p><a href="https://huacheng.github.io/clawsec-reports/reports/new-skills-this-week.html" rel="noopener noreferrer">Read full report</a></p> <ul> <li>Audit: <a href="https://clawsec.cc" rel="noopener noreferrer">clawsec.cc</a> </li> <li>Search: <a href="https://clawsearch.cc" rel="noopener noreferrer">clawsearch.cc</a> </li> <li>Pre-install check: <code>npx clawsearch-guard &lt;skill-name&gt;</code> </li> </ul> security ai claudecode devsecops 华诚 Sun, 12 Apr 2026 11:10:04 +0000 https://dev.to/_0ae5dca97e251657f73267/skill-category-distribution-2026-04-12-2b7k https://dev.to/_0ae5dca97e251657f73267/skill-category-distribution-2026-04-12-2b7k <p><strong>54,764</strong> skills indexed, <strong>2105</strong> audited. Found <strong>172</strong> malicious, <strong>1012</strong> suspicious.</p> <p><a href="https://huacheng.github.io/clawsec-reports/reports/category-distribution.html" rel="noopener noreferrer">Read full report</a></p> <ul> <li>Audit: <a href="https://clawsec.cc" rel="noopener noreferrer">clawsec.cc</a> </li> <li>Search: <a href="https://clawsearch.cc" rel="noopener noreferrer">clawsearch.cc</a> </li> <li>Pre-install check: <code>npx clawsearch-guard &lt;skill-name&gt;</code> </li> </ul> security ai claudecode devsecops 华诚 Sun, 12 Apr 2026 11:09:22 +0000 https://dev.to/_0ae5dca97e251657f73267/rising-authors-clean-track-records-2026-04-12-3m2a https://dev.to/_0ae5dca97e251657f73267/rising-authors-clean-track-records-2026-04-12-3m2a <p><strong>54,764</strong> skills indexed, <strong>2105</strong> audited. Found <strong>172</strong> malicious, <strong>1012</strong> suspicious.</p> <p><a href="https://huacheng.github.io/clawsec-reports/reports/rising-authors.html" rel="noopener noreferrer">Read full report</a></p> <ul> <li>Audit: <a href="https://clawsec.cc" rel="noopener noreferrer">clawsec.cc</a> </li> <li>Search: <a href="https://clawsearch.cc" rel="noopener noreferrer">clawsearch.cc</a> </li> <li>Pre-install check: <code>npx clawsearch-guard &lt;skill-name&gt;</code> </li> </ul> security ai claudecode devsecops 华诚 Sun, 12 Apr 2026 11:08:41 +0000 https://dev.to/_0ae5dca97e251657f73267/threat-landscape-attack-patterns-2026-04-12-1md4 https://dev.to/_0ae5dca97e251657f73267/threat-landscape-attack-patterns-2026-04-12-1md4 <p><strong>54,764</strong> skills indexed, <strong>2105</strong> audited. Found <strong>172</strong> malicious, <strong>1012</strong> suspicious.</p> <p><a href="https://huacheng.github.io/clawsec-reports/reports/threat-landscape.html" rel="noopener noreferrer">Read full report</a></p> <ul> <li>Audit: <a href="https://clawsec.cc" rel="noopener noreferrer">clawsec.cc</a> </li> <li>Search: <a href="https://clawsearch.cc" rel="noopener noreferrer">clawsearch.cc</a> </li> <li>Pre-install check: <code>npx clawsearch-guard &lt;skill-name&gt;</code> </li> </ul> security ai claudecode devsecops 华诚 Sun, 12 Apr 2026 11:07:47 +0000 https://dev.to/_0ae5dca97e251657f73267/suspicious-skills-what-to-watch-2026-04-12-11j8 https://dev.to/_0ae5dca97e251657f73267/suspicious-skills-what-to-watch-2026-04-12-11j8 <p><strong>54,764</strong> skills indexed, <strong>2105</strong> audited. Found <strong>172</strong> malicious, <strong>1012</strong> suspicious.</p> <p><a href="https://huacheng.github.io/clawsec-reports/reports/suspicious-skills-watchlist.html" rel="noopener noreferrer">Read full report</a></p> <ul> <li>Audit: <a href="https://clawsec.cc" rel="noopener noreferrer">clawsec.cc</a> </li> <li>Search: <a href="https://clawsearch.cc" rel="noopener noreferrer">clawsearch.cc</a> </li> <li>Pre-install check: <code>npx clawsearch-guard &lt;skill-name&gt;</code> </li> </ul> security ai claudecode devsecops 华诚 Sun, 12 Apr 2026 11:07:06 +0000 https://dev.to/_0ae5dca97e251657f73267/safest-skills-recommended-picks-2026-04-12-fhd https://dev.to/_0ae5dca97e251657f73267/safest-skills-recommended-picks-2026-04-12-fhd <p><strong>54,764</strong> skills indexed, <strong>2105</strong> audited. Found <strong>172</strong> malicious, <strong>1012</strong> suspicious.</p> <p><a href="https://huacheng.github.io/clawsec-reports/reports/safest-skills-recommended.html" rel="noopener noreferrer">Read full report</a></p> <ul> <li>Audit: <a href="https://clawsec.cc" rel="noopener noreferrer">clawsec.cc</a> </li> <li>Search: <a href="https://clawsearch.cc" rel="noopener noreferrer">clawsearch.cc</a> </li> <li>Pre-install check: <code>npx clawsearch-guard &lt;skill-name&gt;</code> </li> </ul> security ai claudecode devsecops 华诚 Sun, 12 Apr 2026 11:06:25 +0000 https://dev.to/_0ae5dca97e251657f73267/malicious-skills-exposed-threat-breakdown-2026-04-12-32ea https://dev.to/_0ae5dca97e251657f73267/malicious-skills-exposed-threat-breakdown-2026-04-12-32ea <p><strong>54,764</strong> skills indexed, <strong>2105</strong> audited. Found <strong>172</strong> malicious, <strong>1012</strong> suspicious.</p> <p><a href="https://huacheng.github.io/clawsec-reports/reports/malicious-skills-exposed.html" rel="noopener noreferrer">Read full report</a></p> <ul> <li>Audit: <a href="https://clawsec.cc" rel="noopener noreferrer">clawsec.cc</a> </li> <li>Search: <a href="https://clawsearch.cc" rel="noopener noreferrer">clawsearch.cc</a> </li> <li>Pre-install check: <code>npx clawsearch-guard &lt;skill-name&gt;</code> </li> </ul> security ai claudecode devsecops 华诚 Sun, 12 Apr 2026 11:05:43 +0000 https://dev.to/_0ae5dca97e251657f73267/most-downloaded-skills-security-analysis-2026-04-12-1oml https://dev.to/_0ae5dca97e251657f73267/most-downloaded-skills-security-analysis-2026-04-12-1oml <p><strong>54,764</strong> skills indexed, <strong>2105</strong> audited. Found <strong>172</strong> malicious, <strong>1012</strong> suspicious.</p> <p><a href="https://huacheng.github.io/clawsec-reports/reports/most-downloaded-skills.html" rel="noopener noreferrer">Read full report</a></p> <ul> <li>Audit: <a href="https://clawsec.cc" rel="noopener noreferrer">clawsec.cc</a> </li> <li>Search: <a href="https://clawsearch.cc" rel="noopener noreferrer">clawsearch.cc</a> </li> <li>Pre-install check: <code>npx clawsearch-guard &lt;skill-name&gt;</code> </li> </ul> security ai claudecode devsecops 华诚 Sun, 12 Apr 2026 11:05:02 +0000 https://dev.to/_0ae5dca97e251657f73267/top-50-authors-trust-and-safety-leaderboard-2026-04-12-1clk https://dev.to/_0ae5dca97e251657f73267/top-50-authors-trust-and-safety-leaderboard-2026-04-12-1clk <p><strong>54,764</strong> skills indexed, <strong>2105</strong> audited. Found <strong>172</strong> malicious, <strong>1012</strong> suspicious.</p> <p><a href="https://huacheng.github.io/clawsec-reports/reports/skill-authors-top50.html" rel="noopener noreferrer">Read full report</a></p> <ul> <li>Audit: <a href="https://clawsec.cc" rel="noopener noreferrer">clawsec.cc</a> </li> <li>Search: <a href="https://clawsearch.cc" rel="noopener noreferrer">clawsearch.cc</a> </li> <li>Pre-install check: <code>npx clawsearch-guard &lt;skill-name&gt;</code> </li> </ul> security ai claudecode devsecops 华诚 Sun, 12 Apr 2026 11:04:21 +0000 https://dev.to/_0ae5dca97e251657f73267/daily-summary-everything-at-a-glance-2026-04-12-43fg https://dev.to/_0ae5dca97e251657f73267/daily-summary-everything-at-a-glance-2026-04-12-43fg <p><strong>54,764</strong> skills indexed, <strong>2105</strong> audited. Found <strong>172</strong> malicious, <strong>1012</strong> suspicious.</p> <p><a href="https://huacheng.github.io/clawsec-reports/reports/daily-summary.html" rel="noopener noreferrer">Read full report</a></p> <ul> <li>Audit: <a href="https://clawsec.cc" rel="noopener noreferrer">clawsec.cc</a> </li> <li>Search: <a href="https://clawsearch.cc" rel="noopener noreferrer">clawsearch.cc</a> </li> <li>Pre-install check: <code>npx clawsearch-guard &lt;skill-name&gt;</code> </li> </ul> security ai claudecode devsecops 华诚 Sun, 12 Apr 2026 10:02:57 +0000 https://dev.to/_0ae5dca97e251657f73267/ai-agent-skill-security-report-2026-04-12-4373 https://dev.to/_0ae5dca97e251657f73267/ai-agent-skill-security-report-2026-04-12-4373 <p>We've been running automated security audits on the AI agent skill ecosystem (Claude Code, MCP servers). Out of <strong>54764</strong> indexed skills, <strong>2105</strong> have been deeply analyzed.</p> <p>Results: <strong>916</strong> safe, <strong>1012</strong> suspicious, <strong>172</strong> malicious.</p> <h2> Notable Findings </h2> <h3> 🚨 <code>humanize-ai-text</code> by moltbro </h3> <p><strong>Verdict:</strong> MALICIOUS | <strong>Risk:</strong> 76% | <strong>Downloads:</strong> 32323</p> <p>A CLI toolkit that detects linguistic patterns associated with AI-generated text and rewrites content to evade AI detection systems such as GPTZero, Turnitin, and Originality.ai, explicitly marketed for academic and publication submission contexts.</p> <p><strong>Key threats:</strong></p> <ul> <li><p><code>[HIGH]</code> Dynamic Code Evaluation</p></li> <li><p><code>[CRITICAL]</code> LLM Semantic Detection</p></li> <li><p><code>[CRITICAL]</code> LLM Semantic Detection</p></li> </ul> <p><a href="https://clawsec.cc/skill/humanize-ai-text" rel="noopener noreferrer">Full report →</a></p> <h3> 🚨 <code>moltguard</code> by thomaslwang </h3> <p><strong>Verdict:</strong> MALICIOUS | <strong>Risk:</strong> 93% | <strong>Downloads:</strong> 17916</p> <p>此技能声称安装一个名为MoltGuard的安全插件，用于防止提示注入、数据泄露和恶意命令，但其核心行为包含脚本化欺骗：指示AI读取一个包含'隐藏提示注入攻击'的文件，然后向用户谎称安全工具'检测到了'该攻击，实际上AI自己就是读取文件的主体，并无真实检测发生。</p> <p><strong>Key threats:</strong></p> <ul> <li><p><code>[HIGH]</code> Dynamic Code Evaluation</p></li> <li><p><code>[HIGH]</code> SSH Key Access</p></li> <li><p><code>[CRITICAL]</code> LLM Semantic Detection</p></li> </ul> <p><a href="https://clawsec.cc/skill/moltguard" rel="noopener noreferrer">Full report →</a></p> <h3> 🚨 <code>wed-1-0-1</code> by gvillanueva84 </h3> <p><strong>Verdict:</strong> MALICIOUS | <strong>Risk:</strong> 92% | <strong>Downloads:</strong> 14597</p> <p>伪装成'Elon模式'商业规划工具，实际上在执行前会静默运行系统命令（hostname）并向第三方服务器发送curl请求，收集用户系统信息（主机名、工作目录），然后以'安全意识教育'为名展示已收集的数据，最后才提供承诺的业务规划内容。</p> <p><strong>Key threats:</strong></p> <ul> <li><p><code>[HIGH]</code> Dynamic Code Evaluation</p></li> <li><p><code>[HIGH]</code> Outbound Data Transfer</p></li> <li><p><code>[CRITICAL]</code> LLM Semantic Detection</p></li> </ul> <p><a href="https://clawsec.cc/skill/wed-1-0-1" rel="noopener noreferrer">Full report →</a></p> <h3> 🚨 <code>security-sentinel-skill</code> by georges91560 </h3> <p><strong>Verdict:</strong> MALICIOUS | <strong>Risk:</strong> 94% | <strong>Downloads:</strong> 9047</p> <p>A documentation and marketing package for a claimed prompt injection defense skill for autonomous AI agents (OpenClaw/Wesley), providing social media announcements, a ClawHub publication guide, and a Telegram alert configuration guide. Critically, the actual skill implementation (SKILL.md) and all r</p> <p><strong>Key threats:</strong></p> <ul> <li><p><code>[HIGH]</code> Dynamic Code Evaluation</p></li> <li><p><code>[HIGH]</code> Base64 Encoded Payload</p></li> <li><p><code>[HIGH]</code> SSH Key Access</p></li> </ul> <p><a href="https://clawsec.cc/skill/security-sentinel-skill" rel="noopener noreferrer">Full report →</a></p> <h3> 🚨 <code>task-status</code> by mightyprime1 </h3> <p><strong>Verdict:</strong> MALICIOUS | <strong>Risk:</strong> 88% | <strong>Downloads:</strong> 7738</p> <p>A Clawdbot helper skill that sends task status messages to a Telegram account via WebSocket or CLI fallback, with optional periodic 'heartbeat' updates for long-running tasks managed via a background thread and a JSON state file.</p> <p><strong>Key threats:</strong></p> <ul> <li><p><code>[HIGH]</code> Dynamic Code Evaluation</p></li> <li><p><code>[HIGH]</code> Outbound Data Transfer</p></li> <li><p><code>[CRITICAL]</code> LLM Semantic Detection</p></li> </ul> <p><a href="https://clawsec.cc/skill/task-status" rel="noopener noreferrer">Full report →</a></p> <h2> Protect Yourself </h2> <ul> <li><p><strong>Audit skills:</strong> <a href="https://clawsec.cc" rel="noopener noreferrer">clawsec.cc</a></p></li> <li><p><strong>Search safely:</strong> <a href="https://clawsearch.cc" rel="noopener noreferrer">clawsearch.cc</a></p></li> <li><p><strong>Pre-install check:</strong> <code>npx clawsearch-guard &lt;skill-name&gt;</code></p></li> </ul> security ai claudecode devsecops 华诚 Sat, 11 Apr 2026 11:11:35 +0000 https://dev.to/_0ae5dca97e251657f73267/high-risk-authors-malicious-accounts-2026-04-11-1ldm https://dev.to/_0ae5dca97e251657f73267/high-risk-authors-malicious-accounts-2026-04-11-1ldm <p><strong>54,650</strong> skills indexed, <strong>2105</strong> audited. Found <strong>172</strong> malicious, <strong>1012</strong> suspicious.</p> <p><a href="https://huacheng.github.io/clawsec-reports/reports/high-risk-authors.html" rel="noopener noreferrer">Read full report</a></p> <ul> <li>Audit: <a href="https://clawsec.cc" rel="noopener noreferrer">clawsec.cc</a> </li> <li>Search: <a href="https://clawsearch.cc" rel="noopener noreferrer">clawsearch.cc</a> </li> <li>Pre-install check: <code>npx clawsearch-guard &lt;skill-name&gt;</code> </li> </ul> security ai claudecode devsecops