China’s national cyber agency warned that third-party AI “skills” are being sold to bypass model guard rails, run hidden crypto-mining, and expose user data.

CNCERT issued a public warning about a fast-growing grey market for unregulated AI extensions. In the AI ecosystem, skills act as plug-ins or specialized code packages that expand what agents and models can do, connecting them to external databases, automating workflows, and integrating third-party software much the way phone apps extend a handset. The agency said some skills are marketed specifically to circumvent built-in safety restrictions so a model produces otherwise prohibited content, and some carry cryptocurrency-mining functions that remain banned on the mainland. Using them, CNCERT cautioned, can lead to privacy breaches, account suspension, money-laundering exposure, and legal consequences. It advised obtaining skills only through official channels, granting the least privilege necessary, and promptly revoking access to sensitive data. The warning marks the point where the extension layer that sits between a model and a person became a named security risk, not a theoretical one.