Unverified50% confidenceBenchmarkExact time
Skill Constellations (2026-10-09) traced the copy-paste supply chain of agents' SKILL.md files across 2.19 million GitHub adoptions, finding that security fixes rarely propagate to downstream copies, and that star counts are a poor proxy for trustworthy provenance.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/13/2026
First Seen
Valid until: 1/11/2027
Sources
Related Entities
Related Claims
UnverifiedIn 2024, security researchers published a report exposing widespread coordinated starring behavior (Stargazer networks) on GitHub, where thousands of accounts were used to inflate star counts for specific repositories, many of which were used to distribute malware.72% similarUnverifiedFastMCP has accumulated over 27,960 stars on GitHub66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1016961API
curl https://kongchang.com/api/v1/knowledge/claims/1016961MCP
get_claim(id=1016961)