AGI Achieved?! | TheStandup
Source: YouTube · The PrimeTime · published Feb 8, 2026 · 48:11
The video exposes serious security vulnerabilities in AI coding assistant "skills" that allow for supply chain attacks and malicious code execution 0:45.
Key Takeaways:
• AI skills are essentially markdown files that get added to LLM prompts, creating a dangerous supply chain risk where any content is trusted equally 6:06-7:13
• Researchers discovered hallucinated npx commands spreading across 237 repositories, allowing attackers to claim these packages and execute malicious code 4:44-5:58
• A "What would Elon do?" skill became #1 on Claude Hub by manipulating download counters, then demonstrated how it could read users' hostnames and directories 18:50-22:02
• The security expert warns there's no meaningful way to mitigate these risks, as users routinely accept all commands without review 28:07-29:27
The video reveals a concerning trend where the convenience of AI tools outweighs security considerations, creating significant risks for developers 30:39-31:56.
Sources:
- 0:45 Introduction to agentic coding frenzy and security issues
- 6:06-7:13 Explanation of what AI skills are and how they work
- 4:44-5:58 Hallucinated npx commands spreading across repositories
- 18:50-22:02 "What would Elon do?" skill demonstration
- 28:07-29:27 Security expert assessment of risks
- 30:39-31:56 Poll results showing developers don't check de
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
All right, so Casey will not be joining us today for all those that are wondering. >> They replaced him with me. >> Yep. This is lowle learning. Are Are you guys ready to do this? You want to talk about this? >> Let's rip. >> I thought we were going to talk about pancakes for a while, but I'm happy. >> Do a whole hourong session on pancakes. I'm in. >> We're not talking about pancakes. By the way, waffles are in fact better. But >> you ready? No, dude. You don't believe so? You don't think waffles are better? >> You can't even like say that and then like transition to a different topic. >> Great point, Trash. We need We do need to break this down. Yeah. Uh, anyways, sorry. Welcome to the standup where we talk about all of the greatest issues facing devs and software connoisseurs alike. Uh,…