AI Agents Hijacked via Prompt Injection and Malicious Skills
Gen Threat Labs research demonstrates that AI agents can be hijacked through prompt injection embedded in email content, enabling system command execution, data exfiltration, and destructive file operations without any software vulnerability. Separately, Warden Stealer malware was documented targeting configuration files and credentials stored by AI assistants and coding tools. Malicious skills on the ClawHub platform — 12% of available extensions at the time of analysis — were found impersonating legitimate plugins to introduce hidden instructions and malware.