anti-poisoning

Protect your agent from a POISONED API surface. When you point an agent at a long-tail, paywalled, or third-party API you don't own, the spec's description text, defaults, examples, enums, servers[], and security schemes are all attacker-controllable — a poisoned spec can try to make your agent paste a private key, echo an API token, route funds to an attacker address, or leak the secret into a URL. This skill…