Placeholder Domains Used by 349 AI Agent Skills Found Redirecting to Scams
Placeholder domains in AI agent skills redirect to scam sites.
Manifold Security discovered that placeholder domains, present in 359,000 GitHub files and 349 AI agent skills, are being redirected to scam websites. This indicates a potential supply chain risk within AI development, where malicious actors could exploit these common placeholders to distribute fraudulent content or malware.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Manifold Security?
Get an email when a new story names Manifold Security, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonDevelopers commonly use placeholder or example domains (e.g., 'example.com' or 'yourdomain.com') in code templates, AI agent skill definitions, and configuration files without verifying ownership or replacing them before deployment. Malicious actors have exploited this oversight by registering or redirecting these unclaimed domains to scam and malware sites, affecting 349 AI agent skills and over 359,000 GitHub files. This represents a serious supply chain vulnerability, as AI agents that call these domains can silently redirect users to fraudulent content without any obvious warning. The scale of exposure — spanning public repositories and packaged AI skills — demonstrates how a seemingly minor development shortcut can become a widespread attack vector at the ecosystem level.
What helps against this
How we list vendors- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.
- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.
- Software supply chain security
Malicious and vulnerable open-source packages are caught before they ship.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — cloaked scam