9 min read

The Supply Chain Inside Your Agents | Thursday, September 17, 2026

The week's agentic-enterprise story has a security footnote it cannot ignore. Even as vendors push agents onto Claude, Slack, and every other surface, the skills, plugins, and connectors those agents load at runtime form a software supply chain that almost nobody is auditing. AIR Security, a startup that left stealth this month, scanned 142,836 live agent skills and classified more than 17,800 of them as pulling instructions from sources no one has vetted. For enterprise leaders, that reframes what agent governance actually has to cover.