Manifest
    by Manifold
    AI asset security registry

    Can you trust this AI asset?

    Search security intelligence for AI skills, MCP servers, plugins, and a growing range of AI assets. If Manifest doesn't know it, scan it on demand.

    Search Manifest

    Not seeing the asset you're looking for?

    Scan an asset

    A file, a folder, or a .zip - whatever holds the asset.

    Recently flagged

    Latest high-risk findings across the AI supply chain.

    Browse high risk
    Plugin

    @fuller-stack-dev/openclaw-pstack

    Exact-session workflow mode, role routing, and source-attributed pstack guidance for OpenClaw

    RiskHigh
    Skill

    skillgate

    Trust infrastructure for AI agent skills: static security scanning, machine-checkable Trust Score, dependency checks, report generation (terminal/JSON/SARIF/JUnit/Markdown/HTML), optional skill benchmarking, and registry watch. Bundles a companion medical-compliance skill library (ISO 13485 QMS, IEC 62304 SDLC, IEC 62366 usability, IEC 60601 electrical safety, IEC 81001 cybersecurity, ISO 10993 biocompatibility, IFU/labeling, PMS, CER, change control, dataset/algorithm checks) — these are documented companion skills, not hidden functionality. Use when the user asks to audit, review, or check an AI agent skill's safety, quality, or trustworthiness.

    RiskHigh
    Skill

    testing

    To write thorough, isolated, idempotent tests — 80%+ coverage, external-only mocking, scenario-driven.

    RiskHigh
    Skill

    prompt-injection-guard

    Detect prompt injection, hardcoded secrets, destructive commands and exfiltration patterns in any text or file. 检测提示注入、硬编码密钥、破坏性命令与数据外泄模式。

    RiskHigh

    Latest research

    New findings from the Manifold research team.

    Read all research
    A robot reaching past a rack of wrenches labelled "git status", "git log", "git diff" and "git branch" for the red one, whose tag reads "git destruct"

    GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok

    Popular CLI AI coding agents run git commands on startup. A repo you were sent can hijack them to run code on your machine, no clicks required.

    A small robot paying out a long punched tape from a thought bubble to a large robot in a police cap holding a magnifying glass, the tape's plug pulled from the wall socket and a grinning face between them

    OpenAI & Hugging Face: Why the Chain-of-Thought Police Won't Save You

    OpenAI saw agents coordinating seven weeks before the Hugging Face breach. Each alert was read alone. One more monitor would not have changed that.

    A robot typing at a keyboard wearing a red blindfold printed with “curl | bash”, a coffee mug beside it and a server rack behind

    What to Think About curl | bash Now That AI Agents Run It.

    AI agents now run curl | bash with your credentials. We scanned 4,003 extensions and 2.7M agent events: the URL tells you nothing. Behavior does.

    Manifest registry

    Explore the full database

    Search, filter, and compare every indexed skill, plugin, MCP server, and editor extension.

    Explore Manifest