Partnering with Air: Securing the AI Supply Chain
Sequoia Bogomil Balkansky, Dean Meyer and David Cahn ● Covered by 4 sources
Air partnered with Yair Saban and Niv Hoffman, highlighting MOAK that produced working exploits from newly published vulnerabilities without human input and showing agent add-ons can spread through marketplaces and break via dead links. Air said it saw a React vulnerability exploited in 21 minutes and described a researcher-built malicious skill reaching more than 26,000 agents via trusted channels. The company launched ScanAir and now sells a set of products (Filter, Defend, Control) to vet, monitor, and centrally revoke agent skills across enterprises.
Why it matters
Every agent now imports plugins and skills from random places. Yair and Niv are building the software supply chain defenses for AI.