Pattern
MCP server and agent-skill supply-chain scanning (tool poisoning, rug pulls, pinning)
Treat MCP servers and agent skills as third-party dependencies that can carry instructions as well as code: scan their tool descriptions and contents before use, pin the version that was reviewed, and detect any change made after approval.
Classification Supply-chain controls for the tools and instructions an agent loads at runtime.
Full entry
The complete treatment — problem, how it works, when to use it, sources, and examples — lives in the volume below.
Browse the full pattern index or the catalog.