Question 1

How does SkillzBench check the license and security status of an AI agent skill?

Accepted Answer

SkillzBench's Verify pillar pins every skill version to a commit SHA, then validates it, runs a license-check, performs a security scan, and applies a quality judgment. Results feed into a 0–100 Trust Score built from security, quality, license, maintenance, and community signals, so security agencies can see risk at a glance before deployment.

Question 2

Can we control exactly which skills each of our security agents can use?

Accepted Answer

Yes. The Equip pillar provides one MCP server plus per-agent loadouts — you toggle skills and tools per agent, and the agent only sees what was chosen for it. This mirrors the least-privilege access control discipline security firms already apply to physical sites and systems.

Question 3

Is SkillzBench live yet, and what does it cost?

Accepted Answer

SkillzBench is pre-launch and actively being built — the waitlist/newsletter is live, the product is not yet public. Planned pricing includes a generous free tier, Pro at roughly $9–15/mo for more agents and unlimited enabled skills, Teams at roughly $15–25/seat/mo for org loadouts, allowlists and audit, and Creator at roughly $5–10/mo for verified authors.

Question 4

What happens if a skill we depend on gets updated upstream?

Accepted Answer

The Stay Current pillar tracks upstream changes, re-scans, and re-benchmarks affected skills, then notifies you. A quiet upstream commit can't introduce a vulnerability into your stack without you knowing — critical when only of organizations currently have processes to assess AI tool security before deployment.

Question 5

How is SkillzBench different from just downloading skills from GitHub directly?

Accepted Answer

GitHub gives you the files; SkillzBench gives you the evidence. Every version is pinned to a commit SHA, license-checked, security-scanned, and quality-judged, then benchmarked in a sandbox with the same model — with and without the skill — so Lift is published in percentage points. Scores are independent of money, and upstream changes trigger automatic re-scans and notifications.

Question 6

Does SkillzBench support skills that include scripts?

Accepted Answer

At launch, SkillzBench's scope is instruction-only skills — SKILL.md packages plus text references. Script-bearing skills will be listed link-out only, so security teams always know exactly what has been verified in-house versus what is referenced externally.

Skill Compliance & License Checks for Agencies