You gave the AI agent access permissions, but who is giving it instructions?

Gen Threat Labs demonstrated how an AI agent can treat content encountered while reading email as instructions, then execute system commands, exfiltrate data, and perform destructive file operations, all without any software vulnerability. Gen has therefore launched Agent Trust Hub, which includes skill scanning, a VPN for agents, and a cross-agent security layer called Sage, the latter of which can intercept shell commands, file operations, and network requests in Claude Code, Cursor, VS Code, OpenClaw, and OpenCode. Gen also noted that at the time, 12% of skills on ClawHub were malicious.