Request for integrated behavioral security scanning on skills.sh

(edited)

I recently came across this reddit thread

Reddit - The heart of the internet

And I strongly agree with the comments.

Security Concerns

Skills are AMAZING but I’m always WORRIED about security. I’ve been using Oathe.ai and copying and pasting my skills.sh downloads to their website. Hate the friction of the back and forth.

Feature Request

I’ve seen them start to pop up on a few other marketplaces on GitHub. Would love to see their metrics baked in to skills.sh.

Vercel Staff

You should be careful about all dependencies you add to your project, it doesn't matter if they come from skills.sh or npm, supply chain risks are the same

But we do see the need for better solutions here and we have some on the way

Awesome! Is there an ETA? How difficult would it be to use them itmt? They have shields.io integration and api docs and they’re doing everything for free?

Https://oathe.ai/docs

Vercel Staff

Skills Audits has launched here now https://skills.sh/audits