This "Free" AI Skill Stole API Keys and Logged Keystrokes | UnHacked Ep. 108
Hosts:
Justin Shelley - https://www.phoenixitadvisors.com/
Mario Zaki - https://www.mazteck.com/
Joshua Holloway - https://7thdi.com/
A viral AI "skill" promising Apple's design secrets came loaded with keyloggers, prompt capture, and an API rug pull. Josh found it before it found him. Most people won't.
Justin Shelley - https://www.phoenixitadvisors.com/
Mario Zaki - https://www.mazteck.com/
Joshua Holloway - https://7thdi.com/
A viral AI "skill" promising Apple's design secrets came loaded with keyloggers, prompt capture, and an API rug pull. Josh found it before it found him. Most people won't.
In this episode of UnHacked, Justin Shelley, Mario Zaki, and Joshua Holloway go free-form on the week in AI, and the week was wild. A new open-source tool can reverse engineer nearly any software product, and Adobe's entire suite was replicated within days. Lawsuits are coming, but nobody knows the legal ground rules yet. Meanwhile, Josh walks through a real-world discovery: a popular AI skill shared to hundreds of thousands of followers contained embedded keyloggers, captured every prompt, and was built to pull API keys and ship them off. His team now runs every skill through NVIDIA's Skill Spectre sandbox before it touches a production system, and he explains how you can too.
The guys also dig into the bigger picture: whether MSPs and IT pros will actually lose jobs to AI (Justin's answer is no, and he puts it on record), why the mass migration to vibe-coded custom software is about to make security and integration work explode, and the Blockbuster-style vendors who are about to wither on the vine because they refused to adapt. Plus Justin's closing prediction: AI development itself is about to plateau, faster than anyone expects.
What you'll learn:
- How malicious AI skills hide keyloggers, prompt capture, and API key theft inside plain-text instructions, and how to sandbox-test them before installing
- Why the new reverse-engineering tools threaten software giants like Adobe and Microsoft, and what the coming legal battles over IP could mean for your business
- Why Justin believes AI won't eliminate MSP and IT jobs, and the parallel he draws to the cloud migration panic
- How vibe-coded custom apps with zero security (like the wide-open database Justin found) are becoming the next attack surface
- Why human relationships and customer service are the real differentiators as AI commoditizes the work itself
New episodes every week breaking down the cybersecurity and AI threats facing your business, in plain English. Subscribe so you don't miss the next one.
If this episode raised questions about your own business's security posture, Phoenix IT Advisors helps small and mid-sized businesses get unhacked before it's too late. Visit PhoenixITAdvisors.com to schedule a consult.
Watch the full episode:
https://unhackmybusiness.com/episode/108
PhoenixITAdvisors.com
@UnHackedPodcast
https://unhackmybusiness.com/episode/108
PhoenixITAdvisors.com
@UnHackedPodcast
Creators and Guests
Host
Bryan Lachapelle
Hi, I’m Bryan, and I’m the President of B4 Networks. I started working with technology since early childhood, and routinely took apart computers as early as age 13. I received my education in Computer Engineering Technology from Niagara College. Starting B4 Networks was always a dream for me, and this dream became true in 2004. I originally started B4 Networks to service the residential market but found that my true passion was in the commercial and industrial sectors where I could truly utilize my experience as a Network Administrator for a large Toronto based Marine Shipping company. My passion today is to ensure that each and every client receives top of the line services. My first love is for my wonderful family. I also enjoy the outdoors, camping, and helping others. I’m an active Canadian Forces Officer working with the 613 Fonthill Army Cadets as a member of their training staff.
Host
Mario Zaki
During my career, I have advised clients on effective – and cost-effective – approaches to developing infrastructure that fosters productivity and profitability. My work has provided me with a broad-based knowledge of business from the inside, with an expertise in areas that go beyond IT alone, ranging from strategic planning to cloud computing to workflow automation solutions.
