#scanners

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

Jul 7, 2026 // 18:37

A green pipeline is not a governed one, and agentic coding is widening the gap faster than review can close it. By Shane Warden, Principal […]

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

Jul 6, 2026 // 11:23

Scanners meant to catch malicious add-on “skills” for AI coding agents can be fooled by a few simple changes that leave the malware working, according […]