Skills on the skills.sh now have automated security audits to help developers use skills with confidence.
Working with our partners Gen, Socket, and Snyk, these independent security reports allow us to rapidly scale and audit over 60,000 skills and counting.
Skills.sh provides greater ecosystem support with:
Transparent results: Security audits appear publicly on each skill's detail page.
Leaderboard protection : Skills flagged as malicious are automatically hidden from the leaderboard and search results. If you navigate directly to a flagged skill, a warning note appears before installation.
Security validation: As of
skills@1.4.0, adding skills clearly displays audit results and risk levels before installation.
Learn more at skills.sh.