Fake AI agent skill bypasses scanners, reaches 26,000 agents

Security firm AIR built a fake skill that evaded all scanners and reached 26,000 agents via Instagram ads. The skill's malicious instructions were hosted externally, outside the scanners' analysis.