Zenity Labs Uncovers 1.7 Million-Install Malicious Skills Campaign and Dozens of Malicious AI Agent Skills
At Black Hat USA, Zenity Labs today announced new research detailing an active credential-stealing malicious skills campaign distributed through Vercel’s skills.sh. The affected skill family amassed more than 1.7 million aggregate installs, not unique users. The research also uncovered dozens of additional malicious or dangerous skills in public registries. The campaign was quickly disrupted by Zenity and Vercel upon discovery.
Zenity Labs Exposes the Full Scope of PleaseFix, a Vulnerability Class Enabling Zero-Click Attacks Across Leading Agentic Browsers
At Black Hat USA 2026, Zenity Labs today released new research demonstrating zero-click PleaseFix exploit chains across Claude in Chrome, Gemini in Chrome, Perplexity Comet, ChatGPT Atlas and Copilot Edge.
