Fetching from the wire…
01
02
03
04
05
06
07
08
Top 5 · 2026-03-05 · source-backed
The agent skills supply chain is under coordinated attack. Snyk's ToxicSkills audit found 36% of ClawHub's 3,984 skills contain prompt injection payloads, 13.4% have critical malware, and submission rates exploded 10x to 500+/day. This week alone: CVE-2026-2256 (CVSS 9.1) is a critical RCE in Microsoft's Agent Framework via crafted MCP tool responses, CVE-2025-59536 hits Claude Code config files, and 30+ MCP-related CVEs have been published in 2026. Meanwhile, SOUL.md memory poisoning creates persistent backdoors that survive skill uninstallation. Action: Audit every installed agent skill immediately. Run mcp-scan on your MCP servers. Pin versions. Treat agent skills like untrusted code — because one in three of them is.
Snyk | MSRC | Invariant Labs
Each link below shares sources, entities, or timing with this story.
Anthropic released MCP / Shared entities / Shared topic / What happened next / Tension
Linked by a graph relationship (Anthropic released MCP); both cover Audit, CVE, CVEs, CVSS; overlapping topics (chain, code, cves, have).
Snyk supports MCP / Shared entities / Same source
Linked by a graph relationship (Snyk supports MCP); both cover CVE, Invariant Labs, MSRC, Snyk; cite the same source (Invariant Labs, MSRC, Snyk).
Microsoft supports MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Microsoft supports MCP); both cover CVE, CVEs, CVSS, MCP; overlapping topics (agent, cves, framework).
MCP uses OAuth / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (MCP uses OAuth); both cover Audit, CVE, CVEs, CVSS; overlapping topics (attack, audit, chain).
Google released MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Google released MCP); both cover Audit, CVE, CVEs, CVSS; overlapping topics (agent, chain, microsoft).
Claude Code uses MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover Action, Claude Code, CVE, CVSS; overlapping topics (action, attack, code).
Anthropic released MCP / Shared entities / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released MCP); both cover Action, Audit, CVEs, MCP; overlapping topics (action, audit, critical, cves).
Claude uses MCP / Shared entities / Shared topic / What happened next
Linked by a graph relationship (Claude uses MCP); both cover Audit, Claude Code, CVSS, MCP; overlapping topics (agent, attack, code).