Question 1

How do I know an AI agent skill won't introduce vulnerabilities into my SOC?

Accepted Answer

SkillzBench's Verify pillar pins every skill version to a commit SHA, validates it, runs a security scan, checks the license, and applies a quality judgment before you deploy. Published research found ~of skills carry at least one vulnerability, so independent scanning is essential for security teams.

Question 2

What does the Lift metric actually tell me about a skill?

Accepted Answer

Lift is the measured performance difference from testing every skill in a sandbox with the same model, with and without the skill, expressed in percentage points. It's always shown separately from ratings and money never touches scores, so you can judge real impact yourself.

Question 3

Can I control which skills each analyst's agent can access?

Accepted Answer

Yes — that's the Equip pillar. One MCP server plus per-agent loadouts lets you toggle skills and tools per agent, and the agent only sees what was chosen. The Teams plan adds org loadouts, allowlists, and audit for organizational governance.

Question 4

When can my security team start using SkillzBench?

Accepted Answer

SkillzBench is pre-launch and actively being built. The waitlist and newsletter are live now — join to get early access, launch updates, and priority information as verification and benchmarking come online.

Question 5

How is SkillzBench different from just browsing GitHub for SKILL.md files?

Accepted Answer

GitHub gives you raw, unverified instruction packages with no security posture, no version history, and no performance data. SkillzBench continuously discovers and dedupes skills, pins versions, scans for vulnerabilities, benchmarks Lift, and tracks upstream changes — turning an unvetted pile of files into a governed skill catalog.

Question 6

Does SkillzBench support script-bearing skills?

Accepted Answer

At launch, SkillzBench covers instruction-only skills (SKILL.md plus text references). Script-bearing skills are listed link-out only, so you always know exactly what execution surface you're dealing with.

Team Skill Governance for Teachers