https://hackerpaper.kaipfister.de/p/2602.22302/Collected HN comments and submissions linking this paper.enMon, 02 Nov 2026 11:27:26 GMThttps://news.ycombinator.com/item?id=48159026urn:hackerpapers:submission:2602.22302:48159026Sat, 16 May 2026 11:02:16 GMT<p>Agent Behavioral Contracts</p><p></p><p>1 point; 0 discussion replies on HN. <a href="https://hackerpaper.kaipfister.de/p/2602.22302/">Paper and source history</a>. A submission is not an endorsement.</p>cs.AIhttps://news.ycombinator.com/item?id=47204082urn:hackerpapers:submission:2602.22302:47204082Sun, 01 Mar 2026 05:51:06 GMT<p>Show HN: SkillFortify, Formal verification for AI agents (auto-discovers)</p><p>Hi HN, I posted SkillFortify here a few days ago as a formal verification tool for 3 agent skill formats. Based on feedback, v0.3 now supports 22 agent frameworks and can scan your entire system with zero configuration. The problem: In January 2026, the ClawHavoc campaign planted 1,200 malicious skills into agent marketplaces. CVE-2026-25253 was the first RCE in agent software. Researchers catalogued 6,000+ malicious agent tools. The industry responded with heuristic scanners — pattern matching, YARA rules, LLM-as-judge. One popular scanner states in its docs: &quot;No findings does not mean no…</p><p>2 points; 1 discussion reply on HN. <a href="https://hackerpaper.kaipfister.de/p/2602.22302/">Paper and source history</a>. A submission is not an endorsement.</p>cs.AI