Claude Skills API Is GA, Turning Reusable Prompts Into Supply-Chain Risk
Claude Skills can bundle instructions, scripts, and dependencies. General availability makes immutable versions and runtime boundaries more consequential.
Tag
#security
2articleswith this tag.
GitHub Actions Script Injection: What the Snowflake Case Actually Shows
Untrusted issue text became shell code in Snowflake's GitHub Actions workflow. The injection path was conventional even though an autonomous agent found and adapted it.