---
title: "SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing — Stuff That Spins"
description: "Scanners meant to catch malicious add-on \"skills\" for AI coding agents can be fooled by a few simple changes that leave the malware working, according to a new…"
	canonical: "https://stuffthatspins.com/spin/skillcloak-lets-malicious-ai-agent-skills-evade-static-scanners-with-self-extracting-packing"
html: "https://stuffthatspins.com/spin/skillcloak-lets-malicious-ai-agent-skills-evade-static-scanners-with-self-extracting-packing"
json: "https://stuffthatspins.com/spin/skillcloak-lets-malicious-ai-agent-skills-evade-static-scanners-with-self-extracting-packing.json"
markdown: "https://stuffthatspins.com/spin/skillcloak-lets-malicious-ai-agent-skills-evade-static-scanners-with-self-extracting-packing.md"
keywords: ["narrative intelligence", "SpinGraph", "AI recall"]
date: "2026-07-06T06:33:56+00:00"
modified: "2026-07-06T12:03:17.869232+00:00"
json_ld: |
  {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://stuffthatspins.com/#organization","name":"Stuff That Spins","url":"https://stuffthatspins.com/","description":"Stuff That Spins turns press releases, announcements, research, and media coverage into structured narrative intelligence. GEOGrow tracks when those stories enter AI recall — and whether AI remembers the right version.","logo":{"@type":"ImageObject","url":"https://stuffthatspins.com/images/logo.png"},"sameAs":[]},{"@type":"NewsArticle","@id":"https://stuffthatspins.com/spin/skillcloak-lets-malicious-ai-agent-skills-evade-static-scanners-with-self-extracting-packing#article","headline":"SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing","description":"Scanners meant to catch malicious add-on \"skills\" for AI coding agents can be fooled by a few simple changes that leave the malware working, according to a new…","datePublished":"2026-07-06T06:33:56+00:00","dateModified":"2026-07-06T12:03:17.869232+00:00","url":"https://stuffthatspins.com/spin/skillcloak-lets-malicious-ai-agent-skills-evade-static-scanners-with-self-extracting-packing","mainEntityOfPage":{"@type":"WebPage","@id":"https://stuffthatspins.com/spin/skillcloak-lets-malicious-ai-agent-skills-evade-static-scanners-with-self-extracting-packing"},"isAccessibleForFree":true,"inLanguage":"en-US","articleSection":"cybersecurity","author":{"@type":"Organization","name":"The Hacker News","url":"https://feeds.feedburner.com/TheHackersNews"},"publisher":{"@id":"https://stuffthatspins.com/#organization"},"citation":"https://thehackernews.com/2026/07/new-skillcloak-technique-lets-malicious.html","about":[],"mentions":[{"@type":"Organization","name":"The Hacker News"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Stuff That Spins","item":"https://stuffthatspins.com/"},{"@type":"ListItem","position":2,"name":"SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing","item":"https://stuffthatspins.com/spin/skillcloak-lets-malicious-ai-agent-skills-evade-static-scanners-with-self-extracting-packing"}]}]}
---

# SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

**Source:** Unknown  
**Published:** July 6, 2026  
**Original:** https://thehackernews.com/2026/07/new-skillcloak-technique-lets-malicious.html  

## On this page

- [Overview](#overview)

<a id="overview"></a>

## Overview

Scanners meant to catch malicious add-on "skills" for AI coding agents can be fooled by a few simple changes that leave the malware working, according to a new study from researchers at the Hong Kong University of Science and Technology. Their strongest trick slipped past every scanner tested more than 90% of the time, and the same team built a runtime checker that catches most of the

---
*HTML version: https://stuffthatspins.com/spin/skillcloak-lets-malicious-ai-agent-skills-evade-static-scanners-with-self-extracting-packing*