Supply-Chain Poisoning Attacks Against LLM Coding Agent Skill Ecosystems
Date: 2026-04
Affected: LLM coding agents (Devin, OpenHands, Cline-style)
Attack vector: model-poisoning
Category: research
Severity: Critical

Study showing that LLM coding agents extend capabilities via third-party 'skills' executed with system-level privileges; a single malicious skill compromises the host. Includes PoC supply-chain attacks against major skill marketplaces.


Mitigations:

Architectural layers (MAESTRO):