Skip to main content

Expore all resources

Article

Inside the 'clawdhub' Malicious Campaign: AI Agent Skills Drop Reverse Shells on OpenClaw Marketplace

Snyk security researchers have uncovered the clawdhub malicious campaign targeting the ClawHub AI marketplace with Trojanized skills that drop reverse shells. This sophisticated attack uses social engineering and obfuscated scripts to compromise hosts via AI agent capabilities on Windows and macOS. Learn how to identify these threats and secure your AI supply chain against evolving agentic workflow risks.

  • Report

    2026 State of Agentic AI Adoption

    Read now

  • White paper

    From First Prompt to Final Fix: How Snyk Secures AI-Driven Development

    Read now

  • Report

    Unifying Control for Agentic AI With Evo By Snyk

    Read now

  • Article

    From SKILL.md to Shell Access in Three Lines of Markdown: Threat Modeling Agent Skills

    Read now
Type
Topic

Showing 1 - 24 of 751 resources

Anthropic Webinar Slide
Video

Snyk & Anthropic: Preparing for the Coming Wave of Autonomous Attacks

resource cs The Automated AI Attacks Playbook How to Prepare for the Coming Wave bowisw
Report

The Automated AI Attacks Playbook: How to Prepare for the Coming Wave

resource cs The Operating Model and Economics of Adversarial Testing
White Paper

Chained Risk: The Operating Model and Economics of Adversarial Testing | Snyk

resource cs the two classes of vulnerability xaalnz
Cheat Sheet

The Two Classes of Vulnerability | Snyk

resource cs ai pentesting
Cheat Sheet

AI Pentesting vs. DAST vs. Manual Pentest | Snyk

resource cs day
Cheat Sheet

The 350-Day Coverage Gap | Snyk

resource ds evp cos
Buyer's Guide

Evo Continuous Offensive Security: Find Your Flaws at Machine Speed Before Attackers Do | Snyk

snyk agentic ai report pr
Report

2026 State of Agentic AI Adoption: Volume II | Snyk

Report

Inside the Agentic Development Supply Chain | Snyk

resource guide agent security
Buyer's Guide

Agent Security Buyer's Guide: Evaluate Agentic Platforms | Snyk

Cheat Sheet

Secure Agentic AI: Fix 3 Governance Gaps Cheat Sheet | Snyk

White Paper

Securing AI Agent Development: Free Whitepaper | Snyk

resource cheatsheet ybuufc
Cheat Sheet

AI Agent Security: 6 Risks Beyond Traditional Controls | Snyk

Video

Secure at Inception with Snyk

resource cheatsheet
Cheat Sheet

Secure AI Agent Development: 3 Risk Vectors Cheat Sheet | Snyk

resource cheatsheet evo reduce risk
Cheat Sheet

Are Your AI Agents Under Control? Cheat Sheet | Snyk

Cheat Sheet

The Hidden Cost of AI Code in Financial Services Cheat Sheet | Snyk

Video

Developers Are Installing AI Agent Skills Too Fast

Video

Mini Shai-Hulud: The Most Sophisticated NPM Supply Chain Attack of 2026

resource cheatsheet stop bleeding
Cheat Sheet

AI Code Security Cheat Sheet: Stop the Bleeding | Snyk

Video

Building Securely with AI

resource guide operational ai
eBook

Executive Guide to Operationalizing & Enforcing AI Governance | Snyk

Video

MCP vs Skills vs Hooks vs Rules Explained (Stop Mixing Them Up)

resource cheatsheet make security stick
Cheat Sheet

Make Security Stick: A Cheat Sheet for Sustaining Security at AI Speed | Snyk

1Page 2Page 3Page 4Page 5Page 32