Who's Vetting Your AI Agent's Add-Ons? As AI agents install skills and plugins on their own, a startup called AIR wants to police that new software supply chain before attackers do.