Remove or uninstall it
Take it out of the agent's settings, or uninstall it.
AI coding agents · Risk · OWASP LLM03 Supply Chain
An add-on your agent loads is on the list
Some MCP servers, skills and extensions have known problems: a version with a published flaw, a package taken down, a host that serves samples. NeuroShield checks yours against a signed list.
Why it matters
An add-on runs with your access. When one is known to be bad, the fix is usually simple: update to the fixed version, or remove it.
What the list holds
| Kind | What it means |
|---|---|
| A version with a known flaw | Fixed in a later version, which the list names. |
| Taken down | The package was removed from its registry. |
| A known host or sample | The add-on talks to, or matches, something already reported. |
How to fix it
Or update it
To the version the list names as fixed.
A signed list, updated without an app update
The list comes from our server, signed, and the app checks the signature before it uses it. Entries are facts with sources, never guesses.
Questions
Does it check every add-on online?
No. The list is downloaded and matched on your computer; nothing about your add-ons is sent.
See your own agents
The check is free: how many agents you have and what they can do. Details and fixes come with Shields.