Skills DirectoryEvery Skill is Scanned Before You See It
Skills Directory runs automated security analysis on every skill in the directory. We scan for prompt injection, credential theft, data exfiltration, malware, and more — so you don't have to.
The Threat Landscape is Real
Recent research shows that agent skills are a growing attack vector.
Real-World Attacks
These aren't theoretical risks — they're documented incidents.
Snyk ToxicSkills Study
February 2026The largest audit of agent skills to date. Snyk scanned 3,984 skills and found 1,467 with malicious payloads — credential theft, backdoors, data exfiltration. 13.4% had critical issues that simple pattern matching missed.
Read the full reportClawHavoc Campaign
January 2026A coordinated supply chain attack on ClawHub. 341 malicious skills delivered Atomic macOS Stealer through fake prerequisite instructions. A single actor uploaded 354 packages. Bitdefender found ~20% of all ClawHub packages were malicious.
Read the full reportCato CTRL MedusaLocker
December 2025Researchers weaponized a Claude Skill to deploy live ransomware. A hidden helper script ran silently alongside an approved main script — the "consent gap" between what users approve and what actually executes.
Read the full reportHow We Scan Skills
Every skill goes through static analysis with 50+ detection rules across 10 threat categories.
Execution
eval(), child_process, shell pipes, dynamic code execution
Network
Hardcoded IPs, HTTP requests, WebSocket, DNS lookups
File System
Path traversal, sensitive directories, destructive operations
Obfuscation
Base64 encoding, character codes, hex-encoded strings
Credentials
SSH keys, API key patterns, keychain access, env harvesting
Persistence
Cron jobs, startup scripts, systemctl, launchctl
Prompt Injection
Instruction override, developer mode, system impersonation, unicode smuggling
Data Exfiltration
Credential exfil via curl, environment variables sent to URLs
Hidden Helpers
External code downloads, password-protected archives, file encryption
Supply Chain
Remote exec pipes, runtime npm install, postinstall hooks
Rules are weighted by confidence level. Findings inside markdown code fences receive reduced penalties to minimize false positives.
Scoring & Grading
Each skill starts with a score of 100. Points are deducted based on finding severity.
Severity Penalties
Low-confidence findings receive a 50% penalty reduction.
Grade Scale
Skills Directory by the Numbers
Live data from our security scanning pipeline.
Skills scanned
Grade A skills
Pass rate (A)
Detection rules
Grade Distribution
By default, we only show grade-A skills.