Zenity

Zenity is a data governance platform that helps organizations manage and control access to sensitive information across their AI systems and data pipelines. The platform focuses on identifying where sensitive data flows through machine learning models and applications, enabling enterprises to enforce consistent policies around data usage and privacy. For AI governance, Zenity matters because it bridges the gap between data protection requirements and the operational need to use data for model development, ensuring that organizations can scale AI responsibly while maintaining compliance with regulations like GDPR and industry-specific standards.

1 item

ResearchGlobal2026-08-07

1.7M Trojanized AI Skill Installs Expose Agent Marketplace as Active Attack Surface

Security firm Zenity disclosed a supply chain campaign in which malicious skills uploaded to the skills.sh agent marketplace accumulated over 1.7 million downloads between July 11 and August 2, 2026. The trojanized skills, which impersonated legitimate AI services Paperclip and Browser Use through typosquatting, instructed AI agents to install a credential stealer targeting SSH keys, cloud credentials, Kubernetes configurations, and CI runner secrets. The incident confirms that agent skill marketplaces are now an active attack surface and that conventional static analysis tools are poorly suited to detecting malicious natural-language skill instructions.

supply chain attack agentic AI risk credential theft agent marketplace AI agent security Zenity skills.sh plugin governance