logo

Placeholder Domains Used by 349 AI Agent Skills Found Redirecting to Scams

ID: 51c0ad4b-6520-57ce-8a3e-27555134a86f

STIX ID: report--51c0ad4b-6520-57ce-8a3e-27555134a86f

Feed Name: HackRead

Threat Score
50/100

Date Published: 2026-09-26

Date Updated: 2026-10-07

Author: Deeba Ahmed

...
...

Manifold Security found that common unreserved documentation placeholder domains (e.g., yoursite.com, your-domain.com) appear in hundreds of thousands of GitHub files and hundreds of AI agent skills; when loaded in real macOS browser sessions JavaScript-assembled redirects led to fake antivirus and investment scam pages, demonstrating that static checks miss these runtime, environment-specific cloaked ad chains and advising developers and AI tools to treat unreserved placeholder URLs with caution.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.