AIR | Black Hat 2026

The AI Ecosystem Became A Circus

Skills, MCPs, Plugins, subagents - employees add new AI add-ons every day. These add-ons connect to systems, access data, and execute actions. 

Most organizations never see what’s happening behind the curtain. If you could see everything an AI add-on can access, would you still approve it? Or would you hit Revoke?

Anyone can build an AI Add-on

Anyone can create it, package it as something useful, and make it available for download. To the user, it looks legitimate. To the organization, it can become a security risk.

That’s the problem.

AI adoption is no longer just apps and agents. It’s a supply chain. Every skill, plugin, MCP, and subagent brings its own code, permissions, dependencies, and trust assumptions. 

The chain is growing faster than anyone can map it, so is the new attack surface.