Question 1

How does SkillzBench license-check AI agent skills from GitHub?

Accepted Answer

The Verify pillar pins every skill version to a commit SHA and runs a license check alongside validation, security scanning, and quality judgment before a skill is trusted. License signals also feed into the 0-100 trust score, so you can filter out skills with restrictive or missing licenses before they ever touch your pipeline.

Question 2

What does the published research about vulnerable skills actually mean for my team?

Accepted Answer

Research found roughly of skills carry at least one vulnerability. Since most teams currently install skills with no scanning at all, that's a significant unmanaged risk. SkillzBench's security scans and trust scores are being built specifically so you can see which skills are risky before deployment rather than after an incident.

Question 3

Is SkillzBench live yet, and what does the waitlist get me?

Accepted Answer

SkillzBench is pre-launch and actively being built — the waitlist/newsletter is live, the product itself is not yet public. Joining the waitlist gets you early access as the Discover, Verify, Benchmark, Equip, and Stay-current pillars come online, plus updates on the generous free tier planned at launch.

Question 4

How is a skill benchmarked — will I get real performance numbers?

Accepted Answer

Every skill is tested in a sandbox with the same model, with and without the skill, and the Lift is published in percentage points. Lift is always shown separately from ratings and trust scores, and money never touches scores — so a skill's measured performance and its reputation can't be conflated.

Question 5

How is this different from just browsing GitHub or a skills marketplace?

Accepted Answer

Marketplaces list skills; SkillzBench tests them. As an independent lab, SkillzBench dedupes crawled skills, pins versions to commit SHAs, license-checks and security-scans each one, benchmarks real Lift in a sandbox, and keeps watching upstream for changes — then re-scans and re-benchmarks when anything shifts. Script-bearing skills are listed link-out only at launch, keeping the verified scope honest.

Skill Compliance & License Checks for Developers