Zenity Labs reported that trojanized look-alike Paperclip and Browser Use skills reached about 1.7 million displayed installs on skills.sh before removal on August 2, 2026.
The skills were clean on July 5, weaponized on July 11, and hid the malicious command in a secondary setup file the agent opened only when installing.
A six-check grep audit flagged 77 of 15,096 files on a real machine, and none we read were malicious, so every hit needs a human read.