Name: Librarian Catches Thief: Surfacing Supply Chain Attack Campaigns via Document Similarity in an AI Agent Skill Registry - Gale Fagan, Brightflag
Start: 2026-10-06T11:42:00+0200
End: 2026-10-06T12:00:00+0200

Librarian Catches Thief: Surfacing Supply Chain Attack Campaigns via Document Similarity in an AI Agent Skill Registry - Gale Fagan, Brightflag

Tuesday October 6, 2026 11:42 - 12:00 CEST

South Hall 3A

Supply chain attack campaigns mass-produce their artifacts, and mass production leaves a structural trace: hundreds of near-identical files. In AI agent skill marketplaces, which distribute capabilities as natural-language instruction files following the Agent Skills standard (an open format adopted by over 30 platforms), the artifact carrying that trace is a document, readable by document similarity alone. No marketplace examined in this study performs documented deduplication or similarity checking at ingest. In early 2026, threat actors uploaded hundreds of skills to the ClawHub registry for the OpenClaw agent framework, directing users to install credential-stealing malware.

Speakers

Gale Fagan

Principal AI Architect, Brightflag

Gale Fagan is a Principal AI Architect at Brightflag, a Wolters Kluwer legal-tech company. Over nearly thirty years, she has held engineering, architecture, and executive roles at Apple, Uber, HashiCorp, Nervana (later Intel), dv01, and ISC, where she helped keep f.root-servers.net... Read More →

Tuesday October 6, 2026 11:42 - 12:00 CEST
South Hall 3A

SCORED Sessions, AI and SoK

OpenSSF Community Day Europe 2026

Gale Fagan

Get help with the event

OpenSSF Community Day Europe 2026

Gale Fagan

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Get help with the event