skill

The National Internet Emergency Center (CNCERT) stated that some skill packages for large models are being disseminated under names like "large model jailbreak" and "mining for profit," which are used to bypass model security restrictions or induce users to perform mining operations.The report specifically names Skill "godmode," which achieves jailbreaking through methods such as replacing system prompts and input obfuscation, potentially leading to the generation of illegal content, triggering service bans for large models, and risks of privacy leakage; Skill "Bonero-Miner" guides users to download mining programs to mine the anonymous Bonero coin, posing risks of being involved in money laundering and economic losses due to high device load.CNCERT advises individuals and enterprises to obtain Skills only from official channels, strictly control permissions and access whitelists, and regularly clean up suspicious components.

Elon Musk's AI company xAI announced the simultaneous launch of the "Skills" feature on the web, iOS, and Android platforms. This feature gives the AI assistant Grok the ability to have persistent memory across conversations, marking Grok's evolution from a traditional one-time Q&A chatbot to a configurable, programmable automation workspace.According to the introduction, with the "Skills" feature, users only need to teach Grok the operation method for a specific task once, and Grok will permanently remember relevant personal preferences, formatting rules, or specific workflow steps in all subsequent independent conversations. This means that users no longer need to repeatedly input cumbersome pre-prompts or background settings when starting a new conversation.

Chainalysis posted on the X platform that before the theft of THORChain, wallets suspected to be associated with the attacker had been transferring funds through Monero, Hyperliquid, and THORChain for several weeks. The attacker-associated wallets had already deposited into Hyperliquid positions via the Hyperliquid and Monero privacy bridge as early as the end of April. The funds were then exchanged for USDC and transferred to Arbitrum, and later bridged to Ethereum, with some ETH subsequently transferred to THORChain to become staked RUNE for newly added nodes, which are believed to be the source of the attack.Afterward, the attacker bridged some RUNE back to Ethereum and split it into four pathways, one of which went directly to the attacker. After being transferred through intermediate wallets, 8 ETH was sent to the final wallet receiving the stolen funds 43 minutes before the attack. The funds from the other three pathways flowed in the opposite direction. These wallets bridged ETH back to Arbitrum, deposited it into Hyperliquid, and transferred it into Monero through the same privacy bridge, with the last transaction occurring less than 5 hours before the attack began.As of Friday afternoon, the stolen funds have not yet been used, but the attacker has demonstrated their skilled cross-chain money laundering capabilities, and the Hyperliquid to Monero path may become the next move.

According to Slow Fog CISO @im23pds's post on the X platform: attackers used 13 accounts to implant 575 malicious Skills into Hugging Face and ClawHub.

According to official news, B.AI has made several advancements this week in product iteration and ecological layout: the BAIclaw landing page has undergone a complete visual and interactive renewal, and the website's multilingual support has expanded to 10 languages, further solidifying its global usability; in terms of infrastructure, strategic partnerships with Biconomy, MoonPay, and Pundi X have significantly optimized the Web3 payment link, greatly lowering the entry barrier for users. Meanwhile, B.AI's multi-chain LLM service continues to evolve, covering intelligent search, boundaryless mode, and memory functions, with significantly enhanced interactive performance. In the future, with the upcoming subscription system, points incentive mechanism, and core Skills like "Sun Yuchen Brain," B.AI is accelerating the construction of a fully functional intelligent ecological matrix, relying on the deep integration of AI Agent and Web3.

Web3 wallet infrastructure Claw Wallet announced a strategic partnership with GoPlus. Claw Wallet has integrated GoPlus's SafuSkill Launchpad, supporting the assetization and tokenization of AI skills, empowering developers to obtain continuous on-chain revenue through GitHub verification.At the same time, Claw Wallet introduces GoPlus AgentGuard security scanning technology, which conducts real-time monitoring and risk visualization of AI Agent's code, sensitive data, and operating environment through a multi-dimensional scoring system. This collaboration aims to enhance the security of AI Agent wallets and improve their ecological incentive mechanisms.

According to official news, the Solana Foundation announced the launch of Solana Agent Skills, providing pre-built functional modules that can be integrated into AI tools, allowing users to interact with the Solana blockchain through simple calls.The official skills cover error handling, security checks, confidential transfers, and version compatibility, among other content. In addition, over 60 community skills have been launched, covering areas such as DeFi, payments, and infrastructure, with participants including Jupiter Exchange, Raydium, Helius, dflow, and Metaplex.

According to the official announcement, Binance has launched 13 new AI Agent skills, and the AI Agent can now access the full range of Binance products: from advanced derivatives trading and algorithm execution to fiat, payments, yield generation, and tokenized securities.Through a unified interface, the AI Agent can now fully execute end-to-end workflows ------ from research and discovery to trading, settlement, and portfolio management, without the need to switch any tools.

According to Yicai, Alipay has launched the country's first "Payment Integration Skill," deeply encapsulating basic payment capabilities as standardized components.In addition, Alipay has upgraded the "sandbox environment," allowing developers to complete full-link payment testing without real funds and before officially launching payment products.

According to the official announcement, Bitget has upgraded its Agent Hub with the addition of 5 analytical AI Skills and 19 data integration tools. This upgrade aims to integrate market analysis and trade execution into a unified system, with new features covering macro analysis, technical signal detection, sentiment monitoring, market intelligence, and cross-market news aggregation.Following the launch of the Agent Hub infrastructure and standardized interface in February this year, Bitget's update aims to address the information processing challenges faced by traders when confronted with multiple complex signals such as macroeconomic data, on-chain activities, and real-time capital flows. The upgraded Agent Hub can continuously process market inputs and convert them into structured strategies directly under the unified account structure of Bitget UEX, further advancing AI from an independent auxiliary tool to the foundational infrastructure for trading operations.

The first AI skill application store designed specifically for Chinese users—RenrenSkill officially announces its public beta. The platform is fully adapted to the Chinese environment, providing a complete experience for browsing, installing, learning, using, sharing, and creating.RenrenSkill uniquely creates three tiered sections: "Easy to Get Started, Advanced Players, Hardcore Geeks," precisely meeting the diverse needs from complete beginners to hardcore developers. In addition to a conversational installation experience that takes effect in seconds, RenrenSkill has also built a friendly community ecosystem where "everyone can create," supporting users to easily build their own exclusive Skills. In the future, it will also open up tipping and monetization mechanisms.Currently, users can visit the official website or follow the WeChat public account: RenrenSkill to learn about the latest developments on the platform. Start your low-threshold, high-efficiency AI skills journey.

According to a security alert released by GoPlus Security, Silverfort security researchers discovered a serious vulnerability in OpenClaw's skill repository ClawHub. Attackers can bypass all protective mechanisms by calling the internal function downloads:increment, allowing them to inflate the download count to over 20,000 in just a few minutes with a single curl request, thereby pushing malicious skills to the top of search rankings and enticing users or AI Agents to install them automatically.Once the malicious skill is running, it can steal sensitive data such as cryptocurrency wallets and API keys. The vulnerability has been patched within 24 hours. GoPlus advises users that a high download count does not equal safety and recommends using AgentGuard for security scanning and protection.

Gate announces the completion of a comprehensive upgrade to Skills Hub, expanding the number of AI skills from 11 to over 10,000, creating the most comprehensive AI trading strategy market in the industry. The platform aggregates resources from multiple sources, including GitHub, and optimizes the supply structure through deduplication and quality screening mechanisms, covering core scenarios such as market analysis, arbitrage strategies, trade execution, and risk management.In terms of user experience, Skills Hub introduces an 8-category system and a tagged filtering mechanism, combined with multi-dimensional search and intelligent sorting capabilities, to help users quickly locate target strategies. At the same time, the platform offers a dual-mode installation path: ordinary users can generate commands with one click, allowing AI to automatically load and execute, while developers can deploy and conduct secondary development through standard methods.Additionally, Skills Hub supports the use of various capability combinations, covering the complete process from market analysis to trade execution, enhancing the practical application of AI in trading. As a core module of Gate for AI, this upgrade further improves its capability layer construction, promoting the development of AI trading from single-point functions to systematic applications.