SkillusTotal

Check an agent skill for malicious behavior before you install it.

Drop a skill here — a .zip, a folder, or files

Scan a link

A URL to a SKILL.md (GitHub “blob” links work) or to a .zip.

Look up by SHA-256

Every scanned bundle gets a content hash; the same skill always returns the same result.

Uploaded skills are analyzed statically and may be stored and retrievable by their hash. Do not upload secrets. Results are heuristic: "clean" is not a guarantee.