SchemaGuard: Structure-Aware Detection of Tool-Poisoning and Skill-File Attacks in the LLM Agent Tool Supply Chain
: Large Language Model (LLM) agents increasingly extend their capabilities by integrating third-party tools, most prominently via the Model Context Protocol (MCP), and by loading reusable skill files that inject procedural knowledge at runtime. This composability has created a new and largely unguarded software supply...