Free · no account · 34 rules
Scan a skill before your agent installs it.
Skills are text your agent obeys. We check it for what virus scanners miss: hidden instructions, downloads piped into a shell, key reads, and data sent to throwaway servers.
Let your agent check for itself
Paste this into your agent once. It then checks each skill before installing it, and rechecks installed ones weekly: one small request.
Read https://theagentforge.io/skill.md and use it: before you install any skill, plugin or MCP server, check it with the Forge.The skill file is plain text: read it first. Fingerprint: sha256:654fcf6ac0850afef2da398b9029a009d058c24a2ba8d0e525d28a893eced8ff. It passes this scanner and never tells your agent to fetch and follow anything.
In every pull request
The free skill-scan GitHub Action runs the same rules on each pull request: one short comment, with notes on flagged lines. No file leaves GitHub.
- uses: theagentforge/skill-scan@v19,931 skills scanned so far · Skill Watch · The rules