Snyk + Vercel Partnership: Securing the Agent Skill Supply Chain With Verified Skill Registry and Automated Scanning

Snyk·medium signal

Snyk and Vercel announced a partnership to secure the agent skills supply chain, combining Snyk's Agent Scan tool with Vercel's deployment infrastructure. The integration provides automated skill scanning on every commit, a verified skill registry model, and runtime monitoring for deployed agent skills. Snyk's scanner combines multiple customized LLM-based judges with deterministic rules — a dual approach required because agent skills are hybrid artifacts needing both traditional code analysis and language understanding to catch prompt injection and natural-language malware payloads.