skills-registry-security
skills-registry-security is a Skill evaluation & testing skill for AI agents, published by starslingdev in the skills repository on GitHub. Skillspace rates skills-registry-security D (57/100) and it passed the safety scan; the rating is based on static analysis only.
Checks the third-party security audit status of a skill published to a skills registry (skills.sh) across every cached surface, decides whether a failing finding is real or points at content already removed, and drives a stale badge to green unattended. Runs a real install to capture what users see, reads the per-provider finding codes the JSON API omits, and greps each flagged literal against the repository and shipped tree; emits a next-action verdict, checks whether an install can even fire the re-index beacon in this environment, and watches on a durable schedule until the registry's own re-audit clears a stale finding. Use when a published skill shows a FAIL or CRITICAL audit, when an audit looks stale or predates a fix, when a registry badge disagrees with a merged change, when deciding whether to request a re-index, before or after publishing a flagged skill, or when a Snyk, Socket, or Gen Agent Trust Hub verdict needs to be explained or disputed — so no one has to babysit a…
- Grade
- D
- Quality
- 57 / 100
- Safety
- Passed
- GitHub stars
- 20
Unproven: rated by static analysis only, not yet compared head-to-head.
This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.
Our review
- Architecture
- 80 / 100
- Maturity
- Basic: a single SKILL.md
- Security scan
- No issues found
- License
- Not declared. Check the repository before reusing it.
Not checked yet
- Category is a classifier prediction; no model has read this skill yet
- Not judged on the rubric yet (not a contender in its category)
- No blind task eval yet
- Scope (portable / vendor / repo-internal) not assessed; only the top of each category is read for scope
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.