From fad3a1c0a246cf05ceda9e2285e9013512fb0966 Mon Sep 17 00:00:00 2001 From: Cristian Moroaica Date: Mon, 20 Jul 2026 19:16:20 +0300 Subject: [PATCH] Add SkillVerdict agent skill auditor --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index 8500f36..760e128 100644 --- a/README.md +++ b/README.md @@ -374,6 +374,7 @@ AI agents increasingly use external tools, plugins, and skills to interact with | **[Tuning Engines CLI](https://github.com/cerebrixos-org/tuning-engines-cli)** | MCP server and CLI for governed agent/skill/tool access with policy checks, approvals, traces, and role-scoped registries | [![GitHub](https://img.shields.io/github/stars/cerebrixos-org/tuning-engines-cli)](https://github.com/cerebrixos-org/tuning-engines-cli) | | **[AgentSkillsScanner](https://github.com/sumleo/AgentSkillsScanner)** | Static analysis scanner for agent skill definitions | [![GitHub](https://img.shields.io/github/stars/sumleo/AgentSkillsScanner)](https://github.com/sumleo/AgentSkillsScanner) | | **[SkillTotal](https://github.com/pezhik/skilltotal)** | Static, offline scanner for AI components (MCP servers, agent skills, npm/PyPI packages, repos): supply-chain risk, dangerous capabilities, prompt-injection, exfiltration; deterministic, evidence-anchored, SARIF + pre-commit/GitHub Action | [![GitHub](https://img.shields.io/github/stars/pezhik/skilltotal)](https://github.com/pezhik/skilltotal) | +| **[SkillVerdict](https://github.com/cristianmoroaica/bountyverdict)** | Commit-pinned, non-executing pre-install audit of public agent skills that scans the requested SKILL.md plus bounded directory and repository context, with evidence-linked risk verdicts and scan-coverage reporting | [![GitHub](https://img.shields.io/github/stars/cristianmoroaica/bountyverdict)](https://github.com/cristianmoroaica/bountyverdict) | | **[SkilLock](https://github.com/skills-lock/skil-lock)** | Behavior-pinning lockfile + capability-delta PR review for Claude Code & Codex skills; SARIF output for Code Scanning | [![GitHub](https://img.shields.io/github/stars/skills-lock/skil-lock)](https://github.com/skills-lock/skil-lock) | | **[agent-diff-guard](https://github.com/cubxxw/agent-diff-guard)** | Pre-push guardrail that flags high-risk coding-agent diffs such as CI/CD changes, dependency edits, test deletions, hardcoded secrets, and task-scope drift before merge | [![GitHub](https://img.shields.io/github/stars/cubxxw/agent-diff-guard)](https://github.com/cubxxw/agent-diff-guard) | | **[Skillid](https://github.com/dkoly/skillid)** | Policy-driven Claude Code plugin that combines skill guidance with per-tool hooks to enforce org guardrails, confirmation rules, redaction, and connector-specific access control | [![GitHub](https://img.shields.io/github/stars/dkoly/skillid)](https://github.com/dkoly/skillid) |