Latest / The Agentic Stack | VekktorAI
Agent Skill Supply-Chain Security: Patching Injection | The Agentic Stack
Agent skill supply-chain security is where prompt injection is heading next. This week on The Agentic Stack, we work through SkillSecurer, an arXiv preprint submitted on September 12, 2026, that detects and patches prompt injection vulnerabilities inside the reusable capability modules agents load. The conversation covers why a skill's instruction text and tool declarations are trusted by default, and why runtime input filtering never sees them. They also walk through the Open Worldwide Application Security Project's 2026 injection entry, which expands the definition of injection to cover…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.