{"data":{"id":"0ad3418f-8d75-4d62-b3d9-0790adb44873","title":"RuntimeTickets: Source-Grounded Security Obligations for Agent Skills","summary":"RuntimeTickets is a protocol that enforces and audits security requirements while third-party Agent Skills run. A language model proposes obligations from the task's delivery contract, a runtime gate checks each outbound send's recipient, object and amount, and a deterministic decoder verifies each obligation without any language model in the enforcement path. Evaluated at the network egress boundary of three unmodified agent frameworks against production scanners and runtime baselines including SkillGuard, it reported a 0.0% overlook rate and a 0.0% overkill rate, while the scanners erred on both sides.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2611.03772v1","publishedAt":"2026-11-02T17:31:13.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["other"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Agent Skills","SkillGuard","AgentBound"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-02T17:31:13.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.93,"researchCategory":"preprint","atlasIds":null}}