Fetching from the wire…
Top 5 · 2026-02-23 · source-backed
Vercel's skills.sh marketplace (69K+ skills) now has triple-layer security: Snyk scans (catching prompt injection in 36% of skills), Gen/Norton Agent Trust Hub (4-tier risk ratings), and Socket supply chain analysis (94.5% precision). Cisco open-sourced both a skill-scanner and an A2A protocol scanner. AWS published a four-scope security framework. The defense toolkit for agent builders is now comprehensive — but 53% of MCP servers still use static credentials.
Each link below shares sources, entities, or timing with this story.
26. Snyk — Agent Skill Security 27. Gen/Vercel Agent Trust Hub 28. Cisco — A2A Scanner 29. Cisco A2A Scanner GitHub 30. AWS — Agentic AI Security Scoping Matrix 31. Proofpoint — Acuvity Acquisition 32. Bitdefender — MCP Security 33. Linux Foundation — AAIF
A spec is a press release until someone who didn't write it implements it. GitHub made Agent Plugins 1.0 generally available on August 12 across VS Code, Copilot CLI, the Copilot SDK, and the Copilot app on all plans. The spec, published August 6, was co-authored by AWS, Anysp...
The 2026 State of AI Security Report from Cisco ships real tools, not just analysis: an MCP scanner, an A2A protocol scanner, a pickle format fuzzer, and a skill file scanner — all open-source. The data behind it: 83% of organizations plan agentic AI deployment but only 29% fe...
Hudson Rock got hold of the archive and counted it. 433,909 files. 118,829 CI runner dumps traced to 2,488 corporate domains. AWS keys, Salesforce client secrets, Slack signing secrets, Azure environment variables, and AI provider API keys belonging to NVIDIA, Volkswagen, Micr...
AAIF will govern MCP, Block's Goose, AGENTS.md, and Google's A2A under vendor-neutral open governance. AWS, Cisco, Google, Microsoft, Salesforce, SAP, and ServiceNow are participating. Both inter-agent communication and tool access protocols now have neutral stewardship. Linux...
Generally available August 31 in five regions, registering MCP servers with their tools and prompts, A2A agent card definitions, agent skills written as markdown with associated code, and custom JSON descriptors (AWS). It exposes its own search through an MCP server so agents...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.