MCP.Market

skilllint — vet an agent skill before you install it MCP server

online · 93% uptime
by rta.lat·lat.rta/skilllint·v0.1.0
No reviews yet

Vet an agent skill before you install it: structure, triggers, secrets.

A87/100grade A
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
A87/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed skilllint — vet an agent skill before you install it yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

skilllint — vet an agent skill before you install it tools (3)

write = sends, deletes, buys or posts
  • compare_skillsFree

    Сравнить нескольких кандидатов из разных реестров и ранжировать по вердикту и доказательной базе.

  • lint_rulesFree

    Список правил линтера с идентификаторами и severity.

  • lint_skillFree

    Проверить SKILL.md: структура, триггеры, секреты, инъекции, битые ссылки, автономия. Возвращает вердикт, балл и sha256.

Public scan report

scanner v0.1.10 · 2026-10-26 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 4135ms17/20
  • Tool poisoning3 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenancelast push 4 days ago15/15
  • Maintainer identityendpoint served from the registry-verified namespace domain8/10
Overall 87/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How skilllint — vet an agent skill before you install it compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
87/100
higher than 78% of 4,460 AI and agents servers
Tools
3
the typical AI and agents server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Uptime
93%
of our recent checks; the typical remote AI and agents server answers 100%
Response time
2,315 ms
faster than 4% of 2,331 AI and agents servers

What its tools let an agent do: 3 read

Install skilllint — vet an agent skill before you install it in Claude Code, Cursor or VS Code

claude mcp add --transport http skilllint https://rta.lat/skilllint/mcp
Add to Cursor

What the publisher says

From the skilllint — vet an agent skill before you install it repository's README, as published. We do not edit it. Read it on GitHub

skilllint

Private lint of agent skills (SKILL.md). Nothing leaves the machine.

Existing scanners (for example NVIDIA SkillSpector - 71 patterns, AST, YARA, CVE lookup) answer "is this artifact dangerous", and they ship the inspected content to their provider. We do something narrower and complementary:

  • privacy - the check runs locally; only a verdict, a score and a hash go out;
  • reproducibility - the verdict is bound to a sha256 of the file, so it can be signed and verified later;
  • comparison - rank several candidates from different registries instead of scanning one artifact at a time.

Rules

Verdict: PASS (>=80, no critical) | WARN | FAIL (any critical).

Use it

python3 mcp_server.py                            # stdio
python3 mcp_server.py --http 8191                # streamable http
npx -y mcp-remote https://rta.lat/skilllint/mcp  # hosted

Tools: lintskill(path) | compareskills(paths) | lint_rules()

Signed verdicts

lint_skill returns {verdict, score, sha256, findings[]}. That hash is what attest signs and drift enforces as an allowlist - see Verified Tool Registry.

Locales: en, hi. India (Bharata) is supported from day one; legal claims require official sources, otherwise report pending.

License: MIT

Nothing above is checked by us. What we check is on the safety report.

skilllint — vet an agent skill before you install it: common questions

Is skilllint — vet an agent skill before you install it MCP server safe?
Yes, by our scan: it is graded A (87/100). Read the skilllint — vet an agent skill before you install it safety report
How do I install skilllint — vet an agent skill before you install it?
It runs remotely at rta.lat. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does skilllint — vet an agent skill before you install it need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is skilllint — vet an agent skill before you install it maintained?
The last commit was 13 days ago (2026-10-22). The latest release is v0.1.0.
Is skilllint — vet an agent skill before you install it up?
93% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of skilllint — vet an agent skill before you install it?
Servers from other publishers that do the same job: Pm Claude Skills MCP server, Decionis MCP server and Watch Skill MCP server.
How does skilllint — vet an agent skill before you install it compare with other AI and agents MCP servers?
safety score 87/100 (higher than 78% of 4,460 AI and agents servers); tools 3 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to skilllint — vet an agent skill before you install it

Same job from other publishers: the closest match first, then the best rated.

  • Pm Claude Skills
    1310 professional Agent Skills + workflow recipes — searchable & fetchable over MCP.
    A
  • Decionis
    Authorize consequential AI agent actions before execution
    A
  • Watch Skill
    Watch video and live sessions, keep timestamped evidence, and verify an agent's own work.
    B
  • mcptoon
    MCP tools + agent skills in one zero-dependency CLI: 71,929 -> 581 tokens (-99.2%, measured).
    A
  • three.ws Marketplace
    Browse and discover the public three.ws agent marketplace and skills catalog. Read-only.
    A

More from rta.lat →