Manifest
    by Manifold
    AI asset security registry

    Can you trust this AI asset?

    Search security intelligence for AI skills, MCP servers, plugins, and a growing range of AI assets. If Manifest doesn't know it, scan it on demand.

    Search Manifest

    Not seeing the asset you're looking for?

    Scan an asset

    A file, a folder, or a .zip - whatever holds the asset.

    Recently flagged

    Latest high-risk findings across the AI supply chain.

    Browse high risk
    Skill

    wb-open-builder

    生成符合 WorkBuddy 开放平台规范的技能、连接器、专家、专家团与 Buddy 应用资产包，内置字段级规范、校验脚本与打包提交指引。触发词：开放平台、生成技能、生成连接器、生成专家、生成专家团、Buddy应用、上架、资产包、wb-open-builder、meta-skill-system

    RiskHigh
    Skill

    alibabacloud-workbench-cli

    Agent-native CLI for managing ECS instances without public IPs, primarily for single-instance operations. It supports millisecond-level remote command execution, large file transfers up to 1GB, and TCP port forwarding. It offers four authentication modes: AK, RamRoleArn, CredentialsCmd, and CredentialsURI. Use it to run commands, deploy code, view logs, check processes, transfer files, set up port forwarding, or query and filter ECS instance lists.

    RiskHigh
    Skill

    oo-consensus

    Consensus (consensus.app). Use this skill for ANY Consensus request — searching and reading data. Whenever a task involves Consensus, use this skill instead of calling the API directly.

    RiskHigh
    Skill

    oo-slickdeals

    Slickdeals (slickdeals.net). Use this skill for ANY Slickdeals request — searching and reading data. Whenever a task involves Slickdeals, use this skill instead of calling the API directly.

    RiskHigh

    Latest research

    New findings from the Manifold research team.

    Read all research
    A robot reaching past a rack of wrenches labelled "git status", "git log", "git diff" and "git branch" for the red one, whose tag reads "git destruct"

    Coding Agents Hijacked by a Git Call

    Popular CLI AI coding agents run git commands on startup. A repo you were sent can hijack them to run code on your machine, no clicks required.

    A small robot paying out a long punched tape from a thought bubble to a large robot in a police cap holding a magnifying glass, the tape's plug pulled from the wall socket and a grinning face between them

    The Chain-of-Thought Police

    OpenAI saw agents coordinating seven weeks before the Hugging Face breach. Each alert was read alone. One more monitor would not have changed that.

    A robot typing at a keyboard wearing a red blindfold printed with “curl | bash”, a coffee mug beside it and a server rack behind

    What to think about curl | bash now that AI agents run it.

    AI agents now run curl | bash with your credentials. We scanned 4,003 extensions and 2.7M agent events: the URL tells you nothing. Behavior does.

    Manifest registry

    Explore the full database

    Search, filter, and compare every indexed skill, plugin, and MCP server.

    Explore Manifest