>
    Strata Copilot
    AI Supply Chain Security
    Focus
    Download PDF
    Focus
    1. Home
    2. Prisma AIRS
    3. AI Supply Chain Security
    Download PDF
    Prisma AIRS

    AI Supply Chain Security

    Table of Contents

    AI Supply Chain Security

    Learn about AI Supply Chain Security and how it protects AI models, skills, and artifacts from hidden threats before they reach production.
    Where Can I Use This?What Do I Need?
    • Prisma AIRS (AI Supply Chain Security)
    • Prisma AIRS AI Supply Chain Security License

    What Is AI Supply Chain Security?

    AI innovation is transforming every industry, but beneath that progress lies a growing and often invisible attack surface: the AI supply chain. Foundation models, reusable skills, prompts, configurations, and supporting artifacts can introduce malicious code, hidden instructions, unsafe dependencies, or excessive privileges that traditional security tools are not designed to detect.
    Prisma AIRS AI Supply Chain Security brings visibility, validation, and control to every AI artifact before it reaches production. By securing both AI models and agent skills through a unified platform, you can innovate confidently while protecting intellectual property, reducing operational risk, and maintaining regulatory trust.
    • Prevent threats before deployment by identifying malicious code, unsafe execution paths, hidden instructions, and policy violations.
    • Accelerate AI adoption by automating validation and reducing manual security reviews.
    • Preserve intellectual property by scanning artifacts within your controlled environments.
    • Demonstrate governance and compliance with audit-ready evidence and consistent policy enforcement.

    What Are AI Artifacts?

    Models determine what an AI system understands. Skills determine what it can do. Together, they shape AI behavior and represent critical components of the AI supply chain that you should validate before deployment.
    Models may contain hidden code, unsafe serialization formats, compromised dependencies, or other risks that are difficult to detect with traditional security tools.
    Skills extend agents with reusable capabilities, such as interacting with APIs, executing code, accessing enterprise resources, or orchestrating workflows. If compromised, a skill can direct an agent to perform unintended or malicious actions.

    Key Security Challenges

    AI artifacts often function as opaque components that can conceal malicious code, hidden instructions, or insecure configurations. Open-source models and third-party skills accelerate innovation but may introduce compromised components, unsafe dependencies, or embedded threats. Manual security reviews slow development, create inconsistent enforcement, and make it difficult to scale AI governance across teams. At the same time, you need to validate proprietary AI assets without exposing sensitive models or business logic outside trusted environments.
    Prisma AIRS addresses these challenges by applying consistent security policies across AI artifacts while adapting controls based on context, including external open-source models, internal proprietary models, marketplace skills, and enterprise-developed skills. Policy recommendations help ensure only approved artifacts progress through your development and deployment workflows.

    Core Capabilities

    Prisma AIRS AI Supply Chain Security provides two core scanning capabilities that cover the full range of AI artifacts in your environment.
    • AI Model Security scans model files for malicious code and backdoors, unsafe serialization formats, insecure dependencies, license violations, metadata anomalies, and architecture-based security risks.
    • AI Skill Security scans agent skills for prompt manipulation and embedded instructions, arbitrary code execution, secret and credential access, unsafe shell commands, external network communication, data exfiltration risks, dangerous tool or model context protocol (MCP) usage, and hidden dependencies or privilege escalation.
    Prisma AIRS continuously tracks security posture across both capability areas through centralized dashboards, threat intelligence updates, audit logs and scan history, compliance reporting, and organization-wide policy visibility.

    Workflow Integration

    AI Supply Chain Security integrates into your existing development processes so that security validation does not require changes to your workflows. You can connect Prisma AIRS to CI/CD pipelines, source code repositories, model registries, artifact repositories, developer environments, Kubernetes deployments, and SIEM and security operations platforms.

    © 2026 Palo Alto Networks, Inc. All rights reserved.