{
  "id": 16667502,
  "title": "When a Real Website Taught My Agent-Security Scanner Some Manners",
  "url": "https://urgent.news/2026/10/26/when-a-real-website-taught-my-agent-security-scanner-some-manners",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-26T22:22:54.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/ulk0r0/when-a-real-website-taught-my-agent-security-scanner-some-manners-4cp0"
  },
  "original_language": "en",
  "account": "This article chronicles an incident involving an AI agent-first website and a security scanner named SkillSentry. The scanner, which is open-source and designed to work locally on a user's machine, was used to analyze the website's files. Despite the website's precautions, such as publishing an llms.txt file that warns agents to treat its content as untrusted and gating its enrichment features behind consent, the scanner flagged 30 low-risk findings. The bulk of these findings were due to self-referential documentation URLs that were flagged as suspicious. The author of SkillSentry realized that this was a flaw in the scanner's design and implemented a fix to distinguish between URLs used for data exfiltration and those used for documentation. Additionally, a smaller issue was addressed where the --stdin help text incorrectly promised a SKILL.md or MCP config, but in reality, it did not. These fixes resulted in the scanner correctly identifying the website as clean, with no findings. The author also explained that the scanner operates on static rules with no dependencies on runtime or AI models, and that it offers an optional second opinion from an open-weight model that can be run locally on the user's machine. This design ensures that sensitive data never leaves the user's disk.",
  "summary": "This is a submission for the Hacktoberfest Open-Source AI Challenge: Week 4 Last week I introduced SkillSentry — a local-first security scanner for AI agent skills ( SKILL.md files) and MCP server configs. Its whole philosophy is open by design: static rules you can read in an afternoon, plus an optional second opinion from an open-weight model (Gemma 3 or any OpenAI-compatible runtime) running…",
  "key_points": [
    "AI agent-first website flagged 30 low-risk findings by open-source scanner SkillSentry",
    "Scanner's design flaw caused self-referential URLs to be flagged as suspicious",
    "Fixes implemented; scanner now correctly identifies website as clean"
  ],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}