All activity
Drop a SKILL.md into a repo. Codex or Claude picks it up. Now it's running instructions you didn't write.
No exploit needed. It's just how skill loading works.
The idea is simple: your agent should not trust whatever happens to be sitting in .agents/skills.
First open-source project, so please break it.
PlatoA single markdown file can hijack your AI agent.
Natalie Chanleft a comment
Awesome demo, everyone needs to check this out. Will be testing out on my own projects.
AdaptiveChoose the best model for your task