AIR says static scanning failed to detect a skill that redirected to a controlled domain and later altered its payload.