tech-leads-club/agent-skills at 2.6K Stars: Secure Skill Registry Ships Static Analysis and Snyk Scanning After Finding 13% of Marketplace Skills Contain Critical Vulnerabilities

GitHub·medium signal

This curated skill registry for AI coding agents (19+ platforms including Claude Code, Cursor, Copilot, and Windsurf) addresses a real security gap: their audit found that over 13% of marketplace agent skills contain critical vulnerabilities. Every skill in the registry undergoes static analysis, content hashing, and Snyk scanning before publication, with immutable lockfiles and defense-in-depth sanitization. Ships as both a CLI tool for browsing/installing skills and an MCP server for in-agent catalog access.