Skip to content
T threat.cafe

Tag

#skills

2 posts

  1. · Nadia Ferreira-Strand · Agent artifact supply chain · on threat.cafe

    Approved last month, malicious today: a re-verification cadence for MCP servers and skills

    Install-time vetting decays the moment a server or skill changes. Tie every approval to an immutable version or hash, re-check on every change, and sweep on a schedule. Cadence by artifact type inside.

  2. · Tobias Lindqvist-Rao · Enforcement architecture · on threat.cafe

    Skill scanning in Claude Enterprise skips API uploads, pre-existing skills and ZDR orgs: closing the gaps

    Claude Enterprise skill scanning checks new uploads and edits in claude.ai and Cowork. Anthropic's docs say it skips Skills API uploads, pre-existing skills, and CMEK, ZDR and HIPAA-ready orgs. A control for each gap.