Skip to content
T threat.cafe

Tag

#trust-signals

2 posts

  1. · Desmond Okafor-Hale · Agent artifact supply chain · on threat.cafe

    Popular isn't vetted: install counts, stars and 'official-looking' names are the signals attackers fake first

    Documented agent-ecosystem attacks faked forks and contributors, borrowed vendor names and topped AI search results. Rank trust signals by how cheaply they can be forged, and let audit and provenance outrank popularity.

  2. · Margot Reyes · Original research and datasets · on threat.cafe

    The official MCP Registry has no security fields: what a registry listing does and doesn't tell you

    An MCP Registry listing proves a publisher controls a namespace and, for packages, the package. It does not prove review, safe code, or control of a remote URL. The schema has no security field at all.