Charlescsturt

SkillShield is an AI security platform focused on helping developers identify safer skills and MCP servers. Its public directory brings together SKILL.md files and MCP server listings from sources including ClawHub, SkillsMP, Skills.lc, the MCP Registry, MCPMarket, and Awesome MCP. Visitors can browse and compare extensions by risk level, score, category, and source, with security reports and issue summaries to support informed decisions.

Before listings are verified, SkillShield applies static analysis, prompt-injection detection, and sandbox testing to look for malicious code, hidden commands, unsafe instructions, suspicious network activity, and other vulnerabilities. Its MCP scanning also checks for risks such as tool poisoning, excessive permissions, path traversal, and supply-chain concerns. Suspicious submissions are quarantined rather than listed as clean.

The service offers three ways to assess extensions: browse the scored directory, use the local skillshield scanner, or run hosted registry checks with skillshield-registry. A VS Code security extension is also available.