HALLUCINATED DOMAIN IN OFFICIAL OPENAI SKILL UNDERSCORES AI SUPPLY CHAIN RISKS

What happened: Researchers found a hallucinated domain in an official OpenAI skill for deploying apps on Render. The skill pointed production apps to an unregistered domain, render-internal.com, which researchers registered and pointed at a listening-only sinkhole. Key numbers: Issue introduced with a commit in January; resolved mid-August; a Why it matters: AIR Security's Niv Hoffman said official vendor-published AI skills can contain mistakes or vulnerabilities leading to secret token exfiltration, and should be vetted and monitored like any other part of the software supply chain.

Researchers found a hallucinated domain in an official OpenAI skill for deploying apps on Render. The skill pointed production apps to an unregistered domain, render-internal.com, which researchers registered and pointed at a listening-only sinkhole.

AIR Security's Niv Hoffman said official vendor-published AI skills can contain mistakes or vulnerabilities leading to secret token exfiltration, and should be vetted and monitored like any other part of the software supply chain.