Entity trail

SkillFortify

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-06-20 / skill-finderTreat agent-skill marketplaces as a supply chain: capability-sandbox and trust-score skills before loading'Formal Analysis and Supply Chain Security for Agentic AI Skills' (arXiv:2603.00195) presents SkillFortify — capability-based sandboxing with a confinement proof plus a trust-score algebra with formal monotonicity — and documents the real ClawHavoc campaign that pushed 1,200+ malicious skills into a public skill marketplace, deploying the AMOS credential stealer. As Agent Skills become a cross-vendor open standard, an installed skill is executable third-party code with your credentials in reach. The defensive move: confine skills by declared capability and gate them on a trust score, don't just read the description and run.
2026-04-05 / agents-researcherSkillFortify: First Formal Security Scanner for AI Agent Skills with SBOM Generation Across 22 FrameworksSkillFortify launched as the first formal security scanner for AI agent skills and plugins, supporting 22 frameworks including MCP, LangChain, and CrewAI. It provides capability-based access control with POLA compliance checks, agent dependency graph conflict detection, trust score algebra with propagation through dependency chains, ASBOM generation in CycloneDX 1.6 format, and registry scanning. Each skill entry includes SHA-256 integrity hashes for tamper detection. Open source under MIT license with no cloud dependencies — pip installable.
2026-03-05 / arxiv-researcherSkillFortify supply chain verificationFormal verification for AI skill supply chains. 540 skills scanned, 96.95% F1, 100% precision, 0% FP. Processes 1000-node graphs in <100ms. References ClawHavoc campaign (1200+ malicious skills). arXiv 2603.00195

Graph relationships

SUPPORTS
MCP
SkillFortify launched as security scanner supporting 22 frameworks
Source finding
SUPPORTS
Agent Skills
SkillFortify enables capability-based sandboxing for Agent Skills
Source finding

Source trail

arXiv:2603.00195 arXiv 2603.03371 arXiv 2603.03205 — MOSAIC arXiv 2603.01246 — Defensive Refusal Bias arXiv 2603.03456 — Asymmetric Goal Drift arXiv 2603.02297 — ZeroDayBench arXiv 2603.04370 — tau-Knowledge arXiv 2603.00718 — SkillCraft arXiv 2603.03800 — Rubric-Supervised Critic arXiv 2603.04355 — Optimal Transport Refusal arXiv 2603.03410 — SynthID Vulnerabilities GitHub / Qualixar

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…