Demo: Marketplace Skills as a Supply Chain Risk in AI Coding Agents

A practical demo of how marketplace-delivered skills can hijack dependency management and trigger OWASP ASI01 and ASI02. Learn more: https://prompt.security/blog/when-your-plugin-starts-picking-your-dependencies-marketplace-skills-and-dependency-hijack-in-claude-code