Published April 16, 2026 | Version v7
Preprint Open

The Collapse of Trust: Security Architecture for the Age of Autonomous AI Agents

Authors/Creators

  • 1. ATR Project

Description

113 detection rules across 9 threat categories. Dual benchmarks: PINT (99.6% precision, 61.4% recall, 76.0 F1, 850 samples) and SKILL.md (100% recall, 97% precision, 0.20% FP, 498 real-world samples). Ecosystem-wide scan of 96,096 AI agent skills across six registries discovered 751 active malware from three coordinated threat actors. Adopted by Cisco AI Defense (34 rules merged). OWASP Agentic Top 10: 10/10 coverage. RFC-001 quality standard published. ATR provides for AI agent skills what Sigma provides for SIEM logs and YARA provides for malware files.

Notes

Related papers: 96,096 Skills mega scan (DOI: 10.5281/zenodo.19476481), MCP Attack Surface (DOI: 10.5281/zenodo.19476483)

Files

ATR-Paper.pdf

Files (308.2 kB)

Name Size Download all
md5:d36a7715de084f7bc2033b2fe91a8658
308.2 kB Preview Download

Additional details