Loading listing…
ecom-a11y-audit
Security scan passedBy kgelster
Security of ecom-a11y-audit
What we checked
What a skill can do
A skill has no tools of its own. It’s instructions, plus any scripts in its folder, that your agent loads when a task needs them, so it can do whatever your agent is allowed to do. We scan the whole SKILL.md for instructions that hide what they do, reach for credentials, run downloaded code or send data out.
History
Every scan of this listing, newest first.
Every rescan is logged, even when nothing changed.
When a server changes its tools
Nothing new reaches your agent until a person has looked at it.
- 1Ask the live serverWe connect the way your agent does and list its tools. We never call one.
- 2Pin every toolEach tool’s name, description and input schema is hashed, so any change shows up as a diff.
- 3Read it like an attackerRules look for hidden instructions, invisible text, credential grabs, download-and-run and data leaving.
- 4Hold what failsFlagged listings are taken down until a person reviews them, new versions included.
Scanned on every change, and again when our rules improve.