Manifest
    by Manifold
    AI asset security registry

    Can you trust this AI asset?

    Search security intelligence for AI skills, MCP servers, plugins, and a growing range of AI assets. If Manifest doesn't know it, scan it on demand.

    Search Manifest

    Not seeing the asset you're looking for?

    Scan an asset

    A file, a folder, or a .zip - whatever holds the asset.

    Recently flagged

    Latest high-risk findings across the AI supply chain.

    Browse high risk
    MCP server

    io.github.crunchtools/slack

    Secure read-only MCP server for Slack workspaces

    RiskHigh
    MCP server

    io.github.clearcheck-uk/voltix-mcp

    DeFi intelligence for Claude: whale tracking, alpha signals, yields, token safety. USDC on Base.

    RiskHigh
    MCP server

    xyz.deepbluebase/deepblue-trading

    Live crypto trading signals, sentiment, Polymarket analytics. Free demo + x402 micropayments.

    RiskHigh
    MCP server

    io.github.calintzy/evmscope

    EVM blockchain intelligence toolkit for AI agents. 20 tools across 5 chains. Zero config.

    RiskHigh

    Latest research

    New findings from the Manifold research team.

    Read all research
    A robot reaching past a rack of wrenches labelled "git status", "git log", "git diff" and "git branch" for the red one, whose tag reads "git destruct"

    GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok

    Popular CLI AI coding agents run git commands on startup. A repo you were sent can hijack them to run code on your machine, no clicks required.

    A small robot paying out a long punched tape from a thought bubble to a large robot in a police cap holding a magnifying glass, the tape's plug pulled from the wall socket and a grinning face between them

    OpenAI & Hugging Face: Why the Chain-of-Thought Police Won't Save You

    OpenAI saw agents coordinating seven weeks before the Hugging Face breach. Each alert was read alone. One more monitor would not have changed that.

    A robot typing at a keyboard wearing a red blindfold printed with “curl | bash”, a coffee mug beside it and a server rack behind

    What to Think About curl | bash Now That AI Agents Run It.

    AI agents now run curl | bash with your credentials. We scanned 4,003 extensions and 2.7M agent events: the URL tells you nothing. Behavior does.

    Manifest registry

    Explore the full database

    Search, filter, and compare every indexed skill, plugin, MCP server, and editor extension.

    Explore Manifest