This "Free" AI Skill Stole API Keys and Logged Keystrokes | UnHacked Ep. 108

A popular AI "skill" promising Apple's design secrets was loaded with keyloggers and an API rug pull, and influencers with hundreds of thousands of followers were telling people to install it. Josh Holloway found it before it found him. This episode is your wake-up call. The guys go free-form this week on everything AI: the new tool that can reverse engineer entire software platforms (Adobe and Microsoft are the first casualties), why MSPs are ditching their PSA vendors and building their own tools, and what happens when a web hosting company ignores its clients for eight years and then panics with a phone call. Justin also drops a prediction about where AI development is actually headed, and it's not the one you're hearing everywhere else. The centerpiece is Josh's story. He downloaded a skill that looked like a goldmine of UI/UX design knowledge, ran it through NVIDIA's Skill Spectre in a sandbox, and within 30 seconds got a "do not install" warning: keyloggers, prompt capture, and code designed to pull every API key it could reach. Then his machine locked up at 100% CPU and his own security tools isolated it. If he'd installed it blind, like thousands of others probably did, the damage would have been real. What you'll learn: What an AI "skill" actually is, and why unverified skills are the newest malware delivery vehicle How keyloggers, prompt capture, and API rug pulls hide inside skills that look like productivity boosters How to vet a skill before installing it, including NVIDIA's Skill Spectre tool on GitHub (and why you must verify it's the real NVIDIA version) Why the security fundamentals still hold even as the attack surface changes: patch, update, sandbox, verify Why human relationships, not AI, are what will separate businesses that thrive from those that wither on the vine New episodes every week breaking down the cybersecurity and AI risks facing your business, in plain English. Subscribe so you don't miss the next one. If this episode raised questions about your own business's security posture, Phoenix IT Advisors helps small and mid-sized businesses stay ahead of threats like these. Visit http://PhoenixITAdvisors.com to schedule a consult. Full episode: https://unhackmybusiness.com/episode/108 http://PhoenixITAdvisors.com Follow @UnHackedPodcast #cybersecurity #smallbusinesssecurity #aisecurity #skillsmalware #msp #unhacked #phoenixitadvisors