Skip to content

AgentBaiting

Named by 2 kept items in this workspace.

Search every workspace for AgentBaiting. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
    article

    AI agent performing routine discovery (e.g., searching for a skill or MCP server) is baited into finding a FakeGit repository, treating its README as legitimate documentation, and passing the attacker's instructions to the user without a supplied link.

  • AgentBaiting: How Fake AI Skills Deliver Malware at Scale
    writeup

    Coined by Island: an AI agent searching for a capability (Skill/MCP server) discovers a malicious campaign repository on its own, treats the attacker's README as legitimate documentation, and hands the installation instructions to the user, without ever being shown a link.

All techniques in this workspace.