Question 1

How does SkillzBench security-scan agent skills for data analysts?

Accepted Answer

SkillzBench's Verify pillar validates every skill, checks its license, runs a security scan, and applies quality judgment, pinning each version to a commit SHA for integrity. Results feed into a 0-100 trust score built from security, quality, license, maintenance, and community signals. This is what SkillzBench is building and will offer at launch.

Question 2

Can an agent skill I install from GitHub compromise my SOC environment?

Accepted Answer

It can — published research found roughly of skills carry at least one vulnerability, and 97% of AI-related breaches lacked proper access controls. SkillzBench mitigates this by security-scanning every skill, listing script-bearing skills link-out only, and using per-agent loadouts so agents only see the skills and tools you explicitly chose.

Question 3

Which AI coding tools and agents does SkillzBench support?

Accepted Answer

SkillzBench focuses on agent skills (SKILL.md instruction packages) for Claude Code, Codex, Cursor, Gemini CLI, and chat-app agents. At launch, scope covers instruction-only skills — SKILL.md plus text references — while script-bearing skills are listed link-out only.

Question 4

When will SkillzBench launch and how do I get access?

Accepted Answer

SkillzBench is pre-launch and actively being built — the waitlist and newsletter are live now, but the product itself is not yet public. Joining the waitlist reserves your spot and keeps you updated as the five pillars (Discover, Verify, Benchmark, Equip, Stay current) roll out. Pricing is planned around a generous free tier with a Pro tier around $9-15/month.

Question 5

How is SkillzBench different from just browsing GitHub for skills myself?

Accepted Answer

GitHub gives you no verification: no security scanning, no license checks, no benchmarking, and no way to know if a skill actually helps. SkillzBench continuously crawls and dedupes skills, pins versions to commit SHAs, publishes sandboxed Lift results in percentage points, and tracks upstream changes with re-scans and notifications — an independent control panel rather than a raw repository.

Agent Security Scanning for Data Analysts