Sources
Every rule and every claim has a source
The episode sets the market reading. The public research names the attack shapes. The standards and laws supply the official requirement behind each check.
| Source | What it supports |
|---|---|
| The AI Native Dev, Snyk's Manoj Nair: Skills and MCP Are the New npm | The market reading: the new supply chain at 11:18, the intent of a skill at 12:30, the PocketOS case at 12:50, the sandbox and separate identities at 15:45, the 50,000-agent rollout around 10:09. Episode published 20 October. |
| Snyk ToxicSkills: malicious AI agent skills | The counts (3,984 skills, 534 critical, 1,467 with any issue, 76 confirmed payloads, 8 live) and the attack shapes: external malware, obfuscated exfiltration, hidden instructions, secrets, third-party content. |
| OWASP MCP Security Cheat Sheet | Least privilege, pinned tool definitions, sandbox isolation, human approval, token audience and the risk list: tool poisoning, rug pull, confused deputy, supply chain, sandbox escape. |
| MCP security best practices | TLS for remote transport, token passthrough and the audit trail, confused deputy and consent. |
| NIST SP 800-161 Rev 1 | The United States requirements behind the checks: supplier assessments (SR-6), provenance (SR-4), component authenticity (SR-11), least privilege (AC-6), event logging (AU-2), boundary protection (SC-7). |
| EU Cyber Resilience Act | The EU requirements: due diligence on third-party components (Art. 13(5)), secure by default (Annex I Part I(2)(b)), logging (Annex I Part I(2)(l)), limiting attack surfaces (Annex I Part I(2)(j)). |
| UK Cyber Essentials | The UK baseline: application allowlisting, privileged account approval, separate admin accounts, patching, firewalls, malware protection. |
| ASD Strategies to Mitigate Cyber Security Incidents | The Australian technical strategies: application control, patching, restricting admin privileges, sandboxed environments, network segmentation, credential protection, detection. |
What we do not claim
We do not claim that any framework endorses this product, that a clean report means compliance, or that a cited requirement is quoted verbatim. The requirement text on this site is our statement of the published rule, cited so a reader can check it. No figure on this site is a forecast or an estimate presented as a measurement.
The photograph
The hero photograph is by Startup Stock Photos, published on StockSnap under CC0. The credit is in the footer.