Skill Poisioning turning AI agents into malware droppers - warns China's National CERT

China’s National CERT warns that attackers are rapidly exploiting fake AI agent plugins—so-called "skill poisoning"—to covertly turn trusted automation tools into malware droppers, bypassing traditional user-driven infection methods and exposing critical data and systems.