skills.sh

Domain

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

August 6, 2026

Last Seen

October 16, 2026

IOC Validation

ThreatCluster AI

False Positive — False Positive confidence

Legitimate service for AI agent skills

This indicator was flagged as a false positive by AI analysis.

Pivot to external tools

Opens in new tab · no data sent to TC

Reputation · 2

Sandbox · 2

Infrastructure · 5

Malware trackers · 2

Web search · 2

Related Clusters (2)

Malicious AI Skills Campaign Targets 1.7 Million Users, Exposes Major Vulnerabilities

Aug 6·3 sources

Vulnerability in OpenAI Skill Exposes Tokens to Unregistered Domain

1d ago·1 sources

Related Articles (2)

Hallucinated domain in official OpenAI skill underscores AI supply chain risks

Csoonline·1d ago

Zenity Labs Uncovers 1.7 Million-Install Malicious Skills Campaign and Dozens of ...

Businesswire·Aug 6

Related Entities

Supply Chain Attack Malware Malicious Skills Campaign Paperclip Render Vercel OpenAI T1003 - OS Credential Dumping T1041 - Exfiltration Over C2 Channel T1059.006 - Python T1105 - Ingress Tool Transfer T1195 - Supply Chain Compromise