36% of AI agent servers are hackable and nobody is checking

Security researchers scanned 7,000 MCP servers and found 36.7% vulnerable to SSRF attacks. Meanwhile, 1 in 5 AI agent skills on ClawHub contained malware, and one compromised procurement agent cost a manufacturer $3.2 million in 72 hours.