Niv Hoffman, AIR Security’s co-founder and CTO, said the incident shows that even official, vendor-published AI skills can contain mistakes, unsafe assumptions, dependencies, or vulnerabilities that can lead to exfiltration of secret tokens.
“Skills should be vetted and monitored like any other part of the software supply chain, so they can be patched or revoked when a vulnerability is found in one of them,” Hoffman said.
Attackers are increasingly exploring new ways of manipulating AI instruction files such as skills toward malicious ends, while also seeking AI credentials to steal or misuse to operationalize their own use of AI.
