Shared entity / Threat pattern
48 threats catalogued against Google's Agent Payments Protocol v0.2, eight of them High severity, because signed mandates do not cover the pre-authorization context
arXiv
Stack layer / Threat pattern
Unlose Takes Windows VSS Snapshots Before Coding Agents Run, Rejecting the Command-Blocking Approach
GitHub (via Show HN, 2026-08-25)
Stack layer / Threat pattern
SkillPreflight Publishes a 100-Point Scorecard for Agent Skills and a Benchmark of 40 Public Ones
GitHub (via Show HN, 2026-08-25)
Stack layer / Contrast
NIS-Agent isolates context at two decision points to fix agents grading their own prior search steps
arXiv
Policy dependency / Stack layer
Cherry Studio v2.0.9 unifies tool approval into one declarative policy and lets the provider catalog hot-update without an app release
GitHub
Policy dependency / Stack layer
Best Practice Critic Optimization Matches GRPO While Sampling One Response Per Prompt
arXiv 2608.23566
Policy dependency / Stack layer
Attnlocate treats prompt injection as an object detection problem inside the attention matrix, hitting 0.934 TPR at 0.067 FPR
arXiv
Stack layer / Update thread
Google Cloud Shipped Gemini Enterprise for Financial Services With 50 Skills, 13 Connectors and a Partner Agent Marketplace
Google Cloud Blog (corroborated by PRNewswire, 2026-08-25 12:00)