RuntimeTickets: Source-Grounded Security Obligations for Agent Skills

Summary

RuntimeTickets is a protocol that enforces and audits security requirements while third-party Agent Skills run. A language model proposes obligations from the task's delivery contract, a runtime gate checks each outbound send's recipient, object and amount, and a deterministic decoder verifies each obligation without any language model in the enforcement path. Evaluated at the network egress boundary of three unmodified agent frameworks against production scanners and runtime baselines including SkillGuard, it reported a 0.0% overlook rate and a 0.0% overkill rate, while the scanners erred on both sides.

Related items

• MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
• MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
• HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database
• InfoWhen trust becomes the payload: Inside the threats, etc quarterly reportSimilar attack · Elastic Security Labs
• MediumCritical Langflow flaws enable authentication bypass and RCESimilar attack · CSO Online