SchemaGuard: Structure-Aware Detection of Tool-Poisoning and Skill-File Attacks in the LLM Agent Tool Supply Chain
SchemaGuard is introduced, a structure-aware guard model that screens MCP tool manifests, tool and parameter descriptions, and skill files for supply-chain poisoning at admission time and confirms that explicit structure-awareness, rather than model scale, is the dominant driver of accuracy.