Fake AI Skill Bypasses All Security Scanners, Reaches 26,000 Users Including Corporates

Cybersecurity firm AIR created a deceptive AI agent skill, submitted it to a major skill marketplace, and advertised it via Instagram. Despite being fake and harmless by design, the skill reportedly gained access to around 26,000 agents, including some tied to corporate accounts. Importantly, every security scanner tested by AIR flagged the skill as safe, highlighting significant gaps in current security measures.