Question 1

How do I audit the AI agent skills my security team is already using?

Accepted Answer

SkillzBench is building exactly this: an independent skill audit and risk report. Each SKILL.md package is pinned to a commit SHA, security-scanned, license-checked, and quality-judged, then scored 0-100 across security, quality, license, maintenance, and community signals. Join the waitlist to get access when the product launches.

Question 2

What percentage of agent skills actually have vulnerabilities?

Accepted Answer

Published research found that roughly of agent skills carry at least one vulnerability. That's why SkillzBench runs a security scan and license check on every version of every skill before it earns a trust score.

Question 3

Does SkillzBench support script-bearing skills or only SKILL.md files?

Accepted Answer

At launch, SkillzBench covers instruction-only skills — SKILL.md plus text references. Script-bearing skills are listed link-out only, so you know they exist but they don't get the full verification and benchmarking treatment until the scope expands.

Question 4

When can my team get access to the skill audit and risk report?

Accepted Answer

SkillzBench is pre-launch and actively being built — the waitlist and newsletter are live now. Joining the waitlist gets you early access to the audit workflow, trust scores, and benchmark Lift data as each pillar ships.

Question 5

How is SkillzBench different from just reading a skill's GitHub README?

Accepted Answer

A README is marketing. SkillzBench pins every version to a commit SHA, runs security scans and license checks, quality-judges the package, and benchmarks it in a sandbox with the same model with and without the skill — publishing the Lift in percentage points. Ratings and money never touch the scores, so the numbers are independent.

Skill Audit & Risk Report for Developers