this attack is quite nice. - currently we have no skills hub, no way to do versioning, signing, attestation for skills we want to use. - they do sandboxing bu

this attack is quite nice. - currently we have no skills hub, no way to do versioning, signing, attestation for skills we want to use. - they do sandboxing but probably just simple whitelist/blacklist url. they ofcourse needs to whitelist their own domains -> uploading cross account.