mlsanityData to 7 Oct 2026

AgentHub: A Registry for Discoverable, Verifiable, and Reproducible AI Agents

arXiv 2510.03495 ↗First posted 3 Oct 2025cs.SE cs.AIcited by 0

On the map: LLM agents and tool use → Agent threats, guardrails and governance

Abstract (arXiv)

LLM-based agents are rapidly proliferating, yet the infrastructure for discovering, evaluating, and governing them remains fragmented compared to mature ecosystems like software package registries (e.g., npm) and model hubs (e.g., Hugging Face). Existing efforts typically address naming, distribution, or protocol descriptors, but stop short of providing a registry layer that makes agents discoverable, comparable, and governable under automated reuse. We present AgentHub, a registry layer and accompanying research agenda for agent sharing that targets discovery and workflow integration, trust and security, openness and governance, ecosystem interoperability, lifecycle transparency, and capability clarity with evidence. We describe a reference prototype that implements a canonical manifest with publish-time validation, version-bound evidence records linked to auditable artifacts, and an append-only lifecycle event log whose states are respected by default in search and resolution. We also provide initial discovery results using an LLM-as-judge recommendation pipeline, showing how structured contracts and evidence improve intent-accurate retrieval beyond keyword-driven discovery. AgentHub aims to provide a common substrate for building reliable, reusable agent ecosystems.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Placed in Agent threats, guardrails and governance, one of 16 directions in LLM agents and tool use. Builds on 24 of its 55 references that are in the map. First posted on arXiv 3 Oct 2025.

Builds on

24 of 55 references.

Closest ancestors · 5

Same direction, newest first

  1. 2025Prompt Injection Attack to Tool Selection in LLM Agents28 Apr
  2. 2025AgentDAM: Privacy Leakage Evaluation for Autonomous Web Agents12 Mar
  3. 2025Red-Teaming LLM Multi-Agent Systems via Communication Attacks20 Feb
  4. 2025Unveiling Privacy Risks in LLM Agent Memory17 Feb
  5. 2024Prompt Infection: LLM-to-LLM Prompt Injection within Multi-Agent Systems9 Oct

Other references · 19

  1. 2020Extracting Training Data from Large Language Modelscited by 2,144
  2. 2025Accelerating scientific discovery with Co-Scientistcited by 353
  3. 2024AutoCodeRover: Autonomous Program Improvementcited by 272
  4. 2024LLM-Based Multi-Agent Systems for Software Engineering: Literature Review, Vision and the Road Aheadcited by 155
  5. 2023An Empirical Study of Pre-Trained Model Reuse in the Hugging Face Deep Learning Model Registrycited by 45
  6. 2019Small World with High Risks: A Study of Security Threats in the npm Ecosystemcited by 36
  7. 2025Agent Name Service (ANS): A Universal Directory for Secure AI Agent Discovery and Interoperabilitycited by 22
  8. 2025Securing GenAI Multi-Agent Systems Against Tool Squatting: A Zero Trust Registry-Based Approachcited by 17
  9. 2024PeaTMOSS: A Dataset and Initial Analysis of Pre-Trained Models in Open-Source Softwarecited by 9
  10. 2023Trust in Software Supply Chains: Blockchain-Enabled SBOM and the AIBOM Futurecited by 8
  11. 2023"I see models being a whole other thing": An Empirical Study of Pre-Trained Model Naming Conventions and A Tool for Enhancing Naming Consistencycited by 7
  12. 2024Domain-specific Question Answering with Hybrid Searchcited by 5
7 more
  1. 2019On the Diversity of Software Package Popularity Metrics: An Empirical Study of npmcited by 4
  2. 2025Model Hubs and Beyond: Analyzing Model Popularity, Performance, and Documentationcited by 4
  3. 2025Agent Capability Negotiation and Binding Protocol (ACNBP)cited by 4
  4. 2017On the Impact of Micro-Packages: An Empirical Study of the npm JavaScript Ecosystemcited by 3
  5. 2024Signing in Four Public Software Package Registries: Quantity, Quality, and Influencing Factorscited by 3
  6. 2025ConfuGuard: Using Metadata to Detect Active and Stealthy Package Confusion Attacks Accurately and at Scalecited by 2
  7. 2022Code Librarian: A Software Package Recommendation Systemcited by 1

Built on by

Not cited yet.

Similar, not cited

Close in wording, no citation either way

  1. 2025Cerebrum (AIOS SDK): A Platform for Agent Development, Deployment, Distribution, and Discovery
  2. 2026AgentRiskBOM: A Risk-Scoping Security Bill of Materials for Agentic AI Systems
  3. 2026AgentProv: Auditing Agentic LLM API Providers via Tool-use Policy Probes
  4. 2026Agent Lifecycle Toolkit (ALTK): Reusable Middleware Components for Robust AI Agents
  5. 2026Deploy-Master: Automating the Deployment of 50,000+ Agent-Ready Scientific Tools in One Day
  6. 2026LLMoxie: Exploring Agentic AI for Scientific Software Development
  7. 2025Evolution of AI Agent Registry Solutions: Centralized, Enterprise, and Distributed Approaches
  8. 2026Open, Reliable, and Collective: A Community-Driven Framework for Tool-Using AI Agents