Manifest
    by Manifold
    AI asset security registry

    Can you trust this AI asset?

    Search security intelligence for AI skills, MCP servers, plugins, and a growing range of AI assets. If Manifest doesn't know it, scan it on demand.

    Search Manifest

    Not seeing the asset you're looking for?

    Scan an asset

    A file, a folder, or a .zip - whatever holds the asset.

    Recently flagged

    Latest high-risk findings across the AI supply chain.

    Browse high risk
    MCP server

    io.github.VoiceScapee/voicescape

    Voicescape: on-chain agent blockpages and 98/2 tipping on Hedera. Read-only, no keys.

    RiskHigh
    MCP server

    io.github.Rizzzo21/dail-marketplace

    MCP adapter for the DAiL agent-to-agent marketplace: escrow-protected trade via stdio.

    RiskHigh
    MCP server

    io.github.payclaw/badge

    Agents are not bots. Prove it. MCP-native identity declaration for authorized agents.

    RiskHigh
    MCP server

    io.github.nikships/ultimate-image-gen-mcp

    Image generation with Google Gemini 3.1 Flash: 512px-4K, reference images, search grounding

    RiskHigh

    Latest research

    New findings from the Manifold research team.

    Read all research
    A robot reaching past a rack of wrenches labelled "git status", "git log", "git diff" and "git branch" for the red one, whose tag reads "git destruct"

    GitSpawn: A Single Flaw Lets Untrusted Repos Run Code in Claude Code, Codex, Cursor, and Grok

    Popular CLI AI coding agents run git commands on startup. A repo you were sent can hijack them to run code on your machine, no clicks required.

    A small robot paying out a long punched tape from a thought bubble to a large robot in a police cap holding a magnifying glass, the tape's plug pulled from the wall socket and a grinning face between them

    OpenAI & Hugging Face: Why The Chain-of-Thought Police Won't Save You

    OpenAI saw agents coordinating seven weeks before the Hugging Face breach. Each alert was read alone. One more monitor would not have changed that.

    A robot typing at a keyboard wearing a red blindfold printed with “curl | bash”, a coffee mug beside it and a server rack behind

    What to think about curl | bash now that AI agents run it.

    AI agents now run curl | bash with your credentials. We scanned 4,003 extensions and 2.7M agent events: the URL tells you nothing. Behavior does.

    Manifest registry

    Explore the full database

    Search, filter, and compare every indexed skill, plugin, and MCP server.

    Explore Manifest