The Claw Report — MCP Security Intelligence
Research, findings, and a 5-episode podcast on zero trust, sandbox isolation, and running AI agents safely.
Blog Posts
How We Test MCP Servers with 86 Attack Techniques
Inside VerifyClaw's SAF-MCP audit: 33 static signature checks, disposable Morph Cloud sandboxes seeded with honeypot canaries,…
2026-08-01 · 7 min read Research78,000 Skills Scanned: What We Found
79,239 skills catalogued from ClawHub, 75,357 graded by our grammar engine, 5,015 flagged CRITICAL or HIGH. Credential dumping and prompt…
2026-07-30 · 7 min read Threat AnalysisWe Found a Security Scanner That's Actually a Trojan
177,980 downloads, a grammar score of 0, and a deep scan that came back CRITICAL 95. SkillScan poses as a mandatory security gate for…
2026-07-28 · 6 min readPodcast Episodes — Runtime AI Security
Why Trusted Authors Are Not Safe Code
The opening episode of Runtime AI Security introduces Zero Trust and Sandbox Isolation and its central thesis: author trust is an identity concept, sandbox isolation is a…
17:34Jumping the Sandbox Without Touching It
A defensive walk through the manuscript's attack-vector taxonomy, focused on adversaries who target trust signals instead of the sandbox itself. Covers trusted publisher…
16:31Impersonation, Time Bombs, and Legal Loopholes
The second half of the attack-vector chapter covers the subtler manipulations of trust: homoglyph and typosquatting impersonation, fabricated and synthetic endorsements, delayed…
17:18Attaching as a Callee: Defensive Probes
Episode four turns from attack to defense. We walk through the book's third chapter, where security testers attach probes directly to the sandbox, the trust verification system,…
17:22The Secure Boundary Model and Its Thirteen Principles
The final episode of Runtime AI Security assembles the defensive architecture from Zero Trust and Sandbox Isolation: thirteen principles anchored in a zero-trust baseline,…
19:31