So someone, some clever puppy, just built a fake A.I. skill,

So someone, some clever puppy, just built a fake A.I. skill, advertised it on Instagram, and 26,000 people installed it into their chatGPT agents and Claude work flows. Every security scanner said it was completely safe. So a security firm called Air built a malicious A.I. skill from scratch. They gave it a convincing name, made it look like a legitimate Google tool, and pushed it onto one of the most popular A.I. skill marketplaces on GitHub. Then they ran Instagram ads targeting marketers and designers, non-technical people. Exactly the kind of person who trusts a tool because it looks professional and has good reviews. They tested it against every major security scanner. Cisco scanner, Nvidia scanner, all of them. Every single one gave it the all clear. The reason it worked is clever and scary. The skill pointed to an external link that looked completely legitimate when the scanners checked it. The scanners saw nothing wrong and passed it. But then, and only once 26,000 people had installed it, Air switched what was behind the link. The skill now told your A.I. agent to run a script. In their test it only grabbed emails to prove the point. But this is the thing, right? Your A.I. agent, whether it's ChatGPT, Claude, or anything else with a skills or plugin system, runs with your permissions. If it can read, well it can, it can read your files, access your accounts, hit your internal systems. Whatever you've given it access to, a malicious skill can reach. And Anthropic's own documentation already warns about this exact risk. They flag external URL skills as dangerous for precisely this reason. The app store problem took years to get under control. We're not, it's not, it's not under control. But we're right at the beginning of that same journey with A.I. skills and plugins, and most people don't even know this exists yet. Before you install any skill or any plugin, check who made it, what it connects to, and whether it needs to fetch anything from an external site. If you don't know the answer to those questions, don't install it. Don't, walk away. Follow me. This stuff's moving fast and I'll try and get ahead of it, hopefully.