skills.sh Introduces Automated Security Audits for Skills

skills.sh has introduced an automated security audit feature so developers can use skills with peace of mind. This feature was implemented through a partnership with Gen, Socket, and Snyk, enabling the rapid generation and auditing of independent security reports for over 60,000 skills.

Key security enhancements include:

• Transparent result disclosure: Security audit results can be publicly viewed on each skill's detail page.
• Leaderboard protection: Skills classified as malicious are automatically hidden from leaderboards and search results, and a warning message is displayed before installation if accessed directly.
• Security verification process: Starting with [email protected], audit results and risk levels are clearly shown before installation when adding a skill.