What Is Skill Injection?
6.0BRAINROT SCORESkill Injection An attack where a malicious or subtly altered agent skill gets loaded into a coding or task agent's toolset, letting the attacker's instructions execute with whatever trust and permissions the agent already has.
Origin:Emerged alongside the rise of installable "skills" as a first-class agent extension mechanism, mirroring supply-chain attacks on package managers but targeting agent capabilities instead of code libraries.
First Seen:2025
Peak Era:2026 (Agent Security)
Aura Impact:+1 Aura (Reviewing Every Skill's Source Before Installing It) / -2 Aura (Auto-Installing a Skill Because the Description Looked Legit)
EXAMPLE USAGE
"The exfiltration only got noticed because someone finally read what the "helpful" skill injection actually did on every tool call."
Want the full breakdown — categories, trend velocity, platform distribution, and community voting on Skill Injection? Visit the full dictionary entry for Skill Injection.