Agent Skill security scanner

Check an AI skill before you install it.

Paste a public GitHub repository, skill directory, or SKILL.md URL. Saucekit resolves one exact commit and scans the files without installing or executing the skill.

Scan a public Agent Skill

Public GitHub links only. The scanner is best-effort static analysis, not a safety guarantee.