Snyk

Snyk conducted ToxicSkills research identifying 76 confirmed malicious payloads across ClawHub and skills.sh, indicating expansion into AI agent security research

Leadership read: Snyk's ToxicSkills research did something most threat intelligence work does not: it exposed a detection category that the entire security toolchain lacks, not a vulnerability in a specific product. The 76 malicious payloads found in ClawHub and skills.sh were not caught by any mainstream scanner because SAST and SCA have no semantic layer, they inspect code and dependency versions, not natural-language instruction sets that execute like code. By publishing this research, Snyk has formally committed to agent-layer security as a product and research domain, which is a materially different position than developer-facing vulnerability scanning. The related signals set for this period is dominated by product launches across unrelated verticals, which makes direct comparables thin. That said, Armory Defense's launch of Offensive Agentic-AI Simulations and Cisco's April announcement of an AI Agent Security Scanner for IDEs both point toward the same structural gap Snyk is now documenting. This is a category-formation moment: multiple vendors are simultaneously publishing research and tooling into a threat surface, agent skill definitions, MCP tool descriptions, SKILL.md artifacts; that had no named detection discipline eighteen months ago. Companies operating at the intersection of developer tooling, AI agents, and enterprise security face rising demand for leadership in security research, product-led detection engineering, and the kind of policy and standards work required when a new threat category lacks both regulatory framing and vendor consensus. The market is moving toward operators who can translate offensive research findings into defensible detection products at speed.

curated · 2026-05-05 · context →

Snyk founder Guy Podjarny returns to board as director after unexpected CEO departure, creating leadership vacuum

Leadership read: Podjarny's return is not a routine board refresh. Snyk now has a founder back in governance precisely because the CEO seat is empty, meaning day-to-day strategic authority is temporarily unanchored while the board holds the line. That creates a specific operational reality: product direction, commercial priorities, and enterprise sales momentum all depend on a board that is also managing a search, which is a structurally difficult position for a company at Snyk's scale and stage. The founder's presence stabilises investor confidence in the short run but it does not resolve the operating gap. This is one of twelve leadership-change signals we have tracked across sectors in the last 90 days. That set is too diffuse to constitute a pattern, it spans credit unions, pharmaceuticals, media, and government, so the relevant frame here is narrower: founder-return-to-governance events following abrupt CEO departures at late-stage, VC-backed security or infrastructure software companies. That pattern recurs with enough regularity to read on its own. The consistent shape is: founder stabilises board, interim operational leadership emerges internally, external search runs in parallel at compressed timelines. Companies at this stage of founder-return governance face concentrated demand for commercial and go-to-market leadership capable of holding enterprise pipeline continuity during a transition, and for operating leadership with enough product credibility to maintain engineering alignment without the CEO layer in place. The market is moving toward operators who can function as full strategic surrogates, not just caretakers, during compressed interregnums.

curated · 2026-04-14 · context →