OpenLatch/saferskills
OpenLatch
Python2updated 4mo ago
Python2updated 4mo agoEvery AI skill, independently scanned. Public, open-source trust scoring for skills, MCP servers, hooks, and plugins across every agent platform. Apache-2.0. saferskills.ai
ClaudeCodexCursorMCP
agent-securityai-agentsapache-2-0astroclaude-skillsfastapimcpmcp-serverpythonsastsecurity-scannersupply-chain-security
README
<div align="center">
<picture>
<source media="(prefers-color-scheme: dark)" srcset="./webapp/public/banner-dark.png">
<source media="(prefers-color-scheme: light)" srcset="./webapp/public/banner.png">
<img alt="SaferSkills — every AI capability, independently scanned" src="./webapp/public/banner.png">
</picture>
SaferSkills
Every AI capability, independently scanned. Search, install, and verify skills, MCP servers, hooks, and plugins across every agent platform. Free. Open source. Apache 2.0.
saferskills.ai · Methodology · Discussions · Security
</div>Why
You install a Claude skill, an MCP server, a Cursor rules file, or a Codex hook. It runs with your file-system access. It can read your .env. It can curl | bash. It can ship your repo to a paste site. There is no public, transparent record of what each of those tens of thousands of items actually does.
SaferSkills is that public, transparent record. Anyone — a developer, a vendor, a researcher — can submit a GitHub URL. A 30-second scan returns a digestable security report: aggregate trust score (0–100), four-tier breakdown (Identity / Integrity / Behavior / Provenance), every detector