← All IntelClip / CybersecurityThree concrete ways a shared skill goes wrong
From Skill Vector · ≈4:37
Names the specific failure modes a skill review has to catch — hardcoded credentials leaking into logs, destructive shell commands running on someone else's machine, and over-broad permissions.
What’s in it
- Names the specific failure modes a skill review has to catch — hardcoded credentials leaking into logs, destructive shell commands running on someone else's machine, and over-broad permissions.
Clip transcript
are AI skills dangerous? So, I brought here a few examples of what do I mean by AI skills being dangerous? So first uh one thing that can happen is that when people are describing what they skill can or cannot do it can it can ask for it to retrieve a token or something and it will begin using that token hardcoded which will go to logs and so on and it can generate a data leak in the future. Another thing that can happen is also the person to h instruct the AI to use shell comments and then this skill will be used by another person and when they use on their shell a lot of dangerous things that that can happen and a lot of files be modified and so on and there's also permissions. So depending on how the skill was configured, it might have excessive permissions much more than what was needed and even a typo can make some dangerous stuff depending on who is using that such skill.
Comments
Sign in to comment.
Loading comments…