shieldPre-install skill security

Validate agent skills before they touch your environment

Upload a skill package, audit a GitHub repository, or paste raw `SKILL.md` content to review security, compatibility, and install risk in one report.

Explore public GitHub scans

Full GitHub imports now include a repository audit for install-time scripts, workflows, registries, and submodules before validation.

insights

validation axes assessed

warning

threat categories tracked

extension

agent-specific signatures checked

What AI Skill Shield does

cloud_upload

Upload

Drop a local skill package or scan the files directly

travel_explore

Audit

Review GitHub install scripts, workflows, registries, and runtime risk

description

Report

Inspect score, findings, repo audit evidence, and export artifacts

What is AI Skill Shield?

AI Skill Shield is an AI agent skill security scanner. It helps developers and teams inspect a skill before installation by combining static validation, repository evidence, compatibility checks, and a clear install-risk report.

It is designed for Agent Skills, SKILL.md packages, MCP-adjacent workflows, and public GitHub repositories used by AI agents.

How the security check works

1. Import: provide a repository, uploaded package, or SKILL.md.
2. Inspect: detect security findings, permissions, compatibility, and repository risks.
3. Decide: review the score, evidence, install recommendation, and exportable report.

Explore security rules →Read the API docs →

Frequently asked questions

What does AI Skill Shield check?: AI Skill Shield reviews AI agent skill files for exposed secrets, destructive commands, shell-execution risk, external network access, permission concerns, compatibility, and unsafe install-time behavior.
How can I scan an AI agent skill?: Paste a public GitHub repository URL, upload the skill files, or paste the SKILL.md content. AI Skill Shield returns a static score, highest finding severity, evidence, and an install recommendation.
Does AI Skill Shield support repository audits?: Yes. GitHub imports can inspect install scripts, workflows, registries, submodules, and repository metadata in addition to the skill files.
Can AI Skill Shield be used in automated workflows?: Yes. The AI Skill Shield API supports validation, repository auditing, policy checks, comparisons, and report exports for development and CI workflows.

What is AI Skill Shield?

It is designed for Agent Skills, SKILL.md packages, MCP-adjacent workflows, and public GitHub repositories used by AI agents.

Frequently asked questions

What does AI Skill Shield check?

AI Skill Shield reviews AI agent skill files for exposed secrets, destructive commands, shell-execution risk, external network access, permission concerns, compatibility, and unsafe install-time behavior.

How can I scan an AI agent skill?

Paste a public GitHub repository URL, upload the skill files, or paste the SKILL.md content. AI Skill Shield returns a static score, highest finding severity, evidence, and an install recommendation.

Does AI Skill Shield support repository audits?

Yes. GitHub imports can inspect install scripts, workflows, registries, submodules, and repository metadata in addition to the skill files.

Can AI Skill Shield be used in automated workflows?

Yes. The AI Skill Shield API supports validation, repository auditing, policy checks, comparisons, and report exports for development and CI workflows.