supply-chain

Open-source security scanner for AI agents, MCP servers, and agent skills. It auto-discovers installed agent components and checks them for prompt injection, tool poisoning, secrets, malware payloads, and related risks.

JFrog Security Research investigates a batch of SQLite CVEs and argues many are AI-generated or unsupported by the source code and PoC testing. The post includes a comparison matrix, methodology, and detailed breakdown of several alleged vulnerabilities.