Question 1

How does SkillzBench security-scan agent skills like SKILL.md files?

Accepted Answer

SkillzBench's Verify pillar pins every skill version to a commit SHA, then validates it, runs a license check, performs a security scan, and applies a quality judgment. Results feed into a 0-100 trust score built from security, quality, license, maintenance, and community signals.

Question 2

Can SkillzBench help us build an AI security framework for agent tooling?

Accepted Answer

Yes — that's core to what SkillzBench is building. With only 21% of organizations reporting a comprehensive AI security framework, SkillzBench gives you verified skills, trust scores, per-agent loadouts, and org allowlists so agent skills are governed like any other part of your attack surface.

Question 3

Does SkillzBench scan skills that contain executable scripts?

Accepted Answer

At launch, SkillzBench covers instruction-only skills — SKILL.md files plus text references — which get the full verification and benchmarking pipeline. Script-bearing skills are listed link-out only, so you know they exist but aren't given unvetted execution paths.

Question 4

When can my security team start using SkillzBench?

Accepted Answer

SkillzBench is pre-launch and actively being built. The waitlist and newsletter are live now, so joining today gets you early access as the Discover, Verify, Benchmark, and Equip pillars roll out. A generous free tier is planned, with Pro, Teams, and Creator tiers for heavier use.

Question 5

How is SkillzBench different from just reading GitHub stars and READMEs?

Accepted Answer

Stars and READMEs tell you nothing about security or real impact. SkillzBench independently security-scans and license-checks every skill, benchmarks it in a sandbox with the same model with and without the skill, and publishes the Lift in percentage points — with money never touching the scores.

Agent Security Scanning for Recruiters