
Securing the Agent Supply Chain: Tools, Skills, MCP Servers, and Third-Party Risk
An agent can inherit risk from every model, skill, package, prompt, MCP server, and remote tool it trusts. Build an agent bill of materials, verify provenance, detect behavior changes, and contain dependencies at runtime.








