Claude Code skill files can serve as stealthy initial‑access vectors
Reversec shows that Claude Code skill files and sub‑agents act like untrusted pip packages, letting attackers gain initial access and execute arbitrary code on developer machines. The post details two exploit paths, underscoring the need for vetting and securing skill files.