Discussion - Topic: Agent Scan
Details
This week's topic: Agent Scan
Discussion resources to help guide the conversation will be posted below a few days before the meetup.
Zoom link will be added about 5 min before the event starts.
As described in Thoughtworks Technology Radar Vol. #34.
Agent Scan is a security scanner for agent ecosystems that discovers local components, including MCP servers and skills, and flags risks such as prompt injection, tool poisoning, toxic flows, hardcoded secrets and unsafe credential handling. It addresses an emerging gap in agent supply chain visibility and provides a practical way to inventory and test rapidly growing agent surfaces. However, adoption should be deliberate. This is for several reasons: Scans require sharing component metadata with Snyk APIs, and signal quality and false-positive rates require validation in your environment. It’s important that teams confirm the operational value of Agent Scan before making it part of mandatory delivery gates.
Discussion Resources :
Introducing Agent Security By Manoj Nair
https://snyk.io/blog/introducing-agent-security/
Secure MCP Servers, Agent Skills, in the AI Supply Chain By Snyk
https://evo.ai.snyk.io/agent-scan/
Introducing Agent Scan - Skill Inspector: Detect Malicious Skills Instantly By ysztof
https://labs.snyk.io/resources/agent-scan-skill-inspector/
Securing the Agent Skill Ecosystem: How Snyk and Vercel Are Locking Down the New Software Supply Chain By Randall Degges
https://snyk.io/blog/snyk-vercel-securing-agent-skill-ecosystem/
Snyk Launches Agent Security Solution to Protect the Full AI Lifecycle; Announces General Availability of Evo AI-SPM By Snyk
https://snyk.io/news/snyk-launches-agent-security-solution/
Execute First, Ask Never: A Vulnerability in snyk-agent-scan By Jonathan Santilli
https://dev.to/pachilo/execute-first-ask-never-a-vulnerability-in-snyk-agent-scan-4plc
Best AI Agent Security Tools 2026: 24 Options by Boundary By Josh Waldrep
https://pipelab.org/blog/best-ai-agent-security-tools-2026/
Developers Are Installing AI Agent Skills Too Fast By Snyk
https://www.youtube.com/watch?v=C8lSEatiQjs
Scary Agent Skills: Hidden Unicode Backdoors in AI Agent Skills! ...And How To Catch Them By Embrace the Red
https://www.youtube.com/watch?v=amd-GDxPwIo