Advisory database

A public, structured database of security advisories for Agent Skills (SKILL.md) — malicious skills, prompt-injection payloads, hidden-Unicode smuggling, credential theft, and supply-chain incidents across skill registries. It lives in the advisories/ directory of the SkillWarden repository.

Format

• One JSON file per advisory, named SKA-YYYY-NNNN.json, validated against schema/advisory.schema.json in CI.
• Categories mirror SkillWarden’s scan rule IDs so advisories can be cross-checked at scan time.
• Sister database: AgentGate MCP advisories.

Contributing an advisory

1. Copy an existing entry (or the schema) and fill in every required field. Every claim needs a public reference (report, registry takedown, source diff).
2. Only include incidents you can substantiate — this database is deliberately conservative; pattern write-ups without a concrete affected skill belong in docs, not here.
3. Open a PR against wookat/skillwarden. Schema validation runs automatically.

Status

The database currently ships the schema and validation pipeline. Verified incident entries are added as they are confirmed; see the Snyk skills-ecosystem threat report for the class of attacks being tracked.