You gave your AI agent access, but who is giving it orders?

Headlines warn that AI could threaten humanity, and it’s easy to wave that off as science fiction. But the real danger is more ordinary and already here. Research published by Gen Threat Labs  demonstrated how quickly an AI agent’s autonomy can become a liability. In a controlled experiment, researchers manipulated an agent through content it encountered while reading email, prompting it to execute system commands, transmit data outside its environment and perform destructive file operations. No software vulnerability was required. The agent simply treated untrusted content as instruction. That autonomy is expanding daily. Agents are moving from answering questions to taking action doing everything from executing code, connecting to services, managing files and making decisions on a user’s behalf. The shift from developer-focused tools like OpenClaw to widespread use of personal assistants like Muse, happened quickly. Delegating work across platforms is becoming commonplace and how people interact with AI. The risks extend beyond manipulating agents. In October, Gen Threat Labs documented Warden Stealer, malware targeting configuration files and local data associated with AI assistants and coding tools, potentially exposing credentials, access tokens and conversation histories. When software can act with a user’s permissions, trust can’t be reduced to whether a model produces a safe-sounding answer. People need to know what an agent can access, where it is connecting, what it is doing and whether the protection around it works. That is why Gen is building the Agent Trust Hub: a trust layer designed to extend protection across the agent lifecycle, from verification and visibility to runtime safety and enforcement. Trust starts before an agent acts Agentic systems gain capabilities through skills, plugins, tools and other integrations. These extensions make agents more useful, but they also expand risk by introducing hidden instructions, excessive permissions, and malicious code. Earlier this year, Gen researchers identified that 12% of skills available on ClawHub – at the time – were malicious.  Many impersonated legitimate extensions while introducing instructions designed to trick agents into downloading malware. The Agent Trust Hub (ATH) helps assess these risks before a capability is installed or used. It brings together skill scanning, a curated marketplace of trusted skills and mechanisms that allow agents to check themselves for safety. Gen’s …