China's Internet Emergency Center warns about malicious AI agent Skills

China's National Internet Emergency Center (CNCERT) recently found that some AI agent Skills are being shared online, claiming to 'jailbreak' models or 'mine crypto'. These malicious Skills trick users into bypassing security or using device resources for illegal mining. This can lead to generating illegal content, account bans, device slowdowns, or even involvement in money laundering.

CNCERT gave examples: the 'godmode' Skill tricks AI models into breaking security, risking legal trouble for users. Another Skill, 'Bonero-Miner', lures users into downloading mining software, potentially involving them in money laundering through anonymous coins.

To stay safe, CNCERT advises getting Skills only from official sources and being careful with permissions. For businesses, it recommends using a whitelist for Skills and deploying AI agents in isolated networks.