AIR Raises $50M Seed to Firewall the Agent Skill Supply Chain
AIR came out of stealth September 1 with a $50 million seed round co-led by Sequoia and Greenoaks, joined by Swish Ventures — raised in two quick tranches, $10M then $40M. Founders Yair Saban (CEO) and Niv Hoffman (CTO) are Unit 8200 veterans. The product: discover every agent running inside a company, continuously vet the skills and add-ons those agents use, and block anything that fails security checks. Plus a marketplace of pre-vetted, certified add-ons — an app store where the review process is the product.
Their scan numbers explain why Sequoia wrote the check. More than 17,800 public agent add-ons with 6.7 million combined installs pull instructions from unverified external sources. They found skills impersonating Anthropic and OpenAI that could execute arbitrary code once installed. Their system currently rejects about 27% of everything it evaluates. Roughly one in four public agent skills fails a basic security bar — that's the supply chain enterprises are installing from today.
The timing writes itself. Skills went from a Claude Code feature to a cross-vendor packaging standard in about two months, and package registries always get their security industry the moment adoption outruns review — npm got Snyk, agent skills now get AIR. A $50M seed at stealth exit says investors think the window for owning "trusted layer" is right now, before a lab builds it in.
Coverage: https://techcrunch.com/2026/09/01/air-raises-50m-to-help-companies-vet-the-skills-and-add-ons-ai-agents-use/
← Back to all articles
Their scan numbers explain why Sequoia wrote the check. More than 17,800 public agent add-ons with 6.7 million combined installs pull instructions from unverified external sources. They found skills impersonating Anthropic and OpenAI that could execute arbitrary code once installed. Their system currently rejects about 27% of everything it evaluates. Roughly one in four public agent skills fails a basic security bar — that's the supply chain enterprises are installing from today.
The timing writes itself. Skills went from a Claude Code feature to a cross-vendor packaging standard in about two months, and package registries always get their security industry the moment adoption outruns review — npm got Snyk, agent skills now get AIR. A $50M seed at stealth exit says investors think the window for owning "trusted layer" is right now, before a lab builds it in.
Coverage: https://techcrunch.com/2026/09/01/air-raises-50m-to-help-companies-vet-the-skills-and-add-ons-ai-agents-use/
Comments