Skip to content
T threat.cafe

Tag

#skill-scanning

2 posts

  1. · Tobias Lindqvist-Rao · Enforcement architecture · on threat.cafe

    Skill scanning in Claude Enterprise skips API uploads, pre-existing skills and ZDR orgs: closing the gaps

    Claude Enterprise skill scanning checks new uploads and edits in claude.ai and Cowork. Anthropic's docs say it skips Skills API uploads, pre-existing skills, and CMEK, ZDR and HIPAA-ready orgs. A control for each gap.

  2. · Desmond Okafor-Hale · Governance and leadership · on threat.cafe

    Are built-in agent protections enough? What auto mode, MCP allowlists, store scanning and skill scanning cover

    Native agent controls are real, and each covers its own surface: one client, one store, one upload path. The residual risk sits across vendors, across registries and after approval. A coverage map with the blank cells left blank.