Automated security audits now available for skills.sh
By Steven Van ·
Vercel adds independent security audits to skills.sh, built with Gen, Socket, and Snyk, and shows risk levels before install.
Skills on Vercel's skills.sh now carry automated security audits, produced with partners Gen, Socket, and Snyk, covering more than 60,000 skills and counting.
- Audit results appear publicly on each skill's detail page.
- Skills flagged as malicious are hidden from the leaderboard and search results; navigating to one directly shows a warning before installation.
- As of skills@1.4.0, installing a skill shows its audit results and risk level before you proceed.
More detail is in the original announcement.
Vercel
The platform for frontend developers — deploy, preview, and scale web apps and AI agents with zero config.
View Vercel →