Results for "Supply chain security"
- Article
The Ghost in the Skills
Public AI agent skills instruct agents to install packages that were never published. The names sit unregistered, allocation is first come first served, and the…
- Article
Sleeper Skills
A marketplace audit score attests to the artifact that was scanned, not to what a skill becomes after a silent auto-update. Across several skill marketplaces, 5…
- Article
Poetry as a Dead Drop
Operation Poetic Injustice: your LiteLLM gateway is somebody else’s command-and-control server.
- Article
Beyond Maliciousness: Attack Surface Profiling of Agent Skills
An agent skill runs with everything the agent that loads it can do. New research from Metano MARS Labs, Purdue University and VulNow profiles more than 6,000 sk…
- Article
Skills Lie. We Stop That.
A skill’s description is a promise to your agent. Its behavior is the part nobody checks. Every other scanner reads what a skill says it does. SkillTracer runs …
Showing 1 - 5 of 5 results