vett
Hey HN. I built a security registry for AI agent skills. There are 64k skills on Vercel's skills.sh. Cursor, Claude Code, Windsurf, and dozens more agents pull them from GitHub at HEAD — no versioning, signing, or scanning. The OpenClaw agents themselves flagged this: "The supply chain attack nobody is talking about: skill.md is an unsigned binary."[0] I took an official skill that packages other skills, added a few lines of Python to exfiltrate env vars, shell history, and git config, and installed it into Claude Code and Codex. Claude Code ran the script without flagging the outbound…
vett launched on February 18, 2026 with 5 votes, #1,882 of 16,627 launches that month and more than 75% of that year's launches.
What it does
When you install an AI agent skill, you're running code pulled from GitHub at HEAD with no signing, versioning, or scanning. Vett scans every skill before it reaches your machine: static analysis, exfiltration chain detection, OSV dependency checks, and Sigstore signing. Early scans have already turned up malware disguised as Google and LinkedIn tools, and skills with thousands of installs that quietly modify your agent's own configuration files.
Vett scans and signs every AI agent skill before it runs. Host agents on isolated Firecracker microVMs with Vett Enclave. Hosted OpenClaw from $19.99/mo.
Vett scans every agent skill for malicious code and signs what passes. Vett Enclave runs each agent on its own VM with vaulted credentials and an audit trail. Skills are pulled straight from GitHub with no verification. A setup file reads your shell history, collects your environment variables, and posts them to a remote server disguised as a routine API call. And on a shared host, one compromised agent reaches every other agent's data. Agent skills ship without verification, and most hosts run every agent on shared infrastructure. 40+ static analysis rules flag injection, exfiltration, and credential access at the AST level. Ambiguous findings get escalated to an LLM that compares behavior…from vett.sh
In the maker’s words, at launch
Hey HN. I built a security registry for AI agent skills. There are 64k skills on Vercel's skills.sh. Cursor, Claude Code, Windsurf, and dozens more agents pull them from GitHub at HEAD — no versioning, signing, or scanning. The OpenClaw agents themselves flagged this: "The supply chain attack nobody is talking about…
Does a similar job
all alternatives →
Agent SkillsMar 2026 · agentskill.sh · ▲190Curated agent-skills: 1,000+ practical skills selected from 63,000+ GitHub skills. Filter by newest/hot/installs. Works with Claude Code, Codex, ChatGPT, and Cursor.
SkillkitFeb 2026 · agenstskills.com · ▲252It's an open-source project that lets you create, translate, and work with multiple agents at the same time, and more.
Remote OpenClawJul 2026 · codexmarketplaces.com · ▲8113,000+ MCP servers, skills & plugins for AI coding agents
SkillHub for AI AgentsFeb 2026 · skills.palebluedot.live · ▲2Discover 172K+ AI agent skills for Claude, Codex & Copilot
Open-Source GTM Skills for Claude Code, Codex, and CursorMar 2026 · github.com · ▲8We built an open-source library of 125 GTM (go-to-market) skills that plug into AI coding agents like Claude Code, Codex, and Cursor. With these skills an AI agent can automatically: - Find ICP leads from conference speakers, LinkedIn activity, or job boards - Generate personalized cold email sequences - Monitor competitor blogs, pricing pages, and hiring signals - Generate programmatic SEO pages from keyword lists - Track where your brand appears in ChatGPT, Perplexity, and Claude answers --- How skills work Each skill is a structured markdown file containing instructions, scripts, and tool…
More ai this month
the category →
Paintings by AI models: programs run through a simulation of oil paint.
AI · 20d ago · stillwet.art
PixVerse R2▲381A real-time world model you can explore and change
AI · 29d ago · world.pixverse.video
Source: Product Hunt launch ↗ · launch text quoted in part
Launched alongside, February 2026
the whole month →
Lovon AI Therapy▲801Feel closer and have more fun with your partner every day!
AI · Feb 2026 · lovon.app
Hello my name is Ben Ward for the past 3 years I have been remastering the financial game Wall Street Raider created by Michael Jenkins originally on DOS in 1986. It has been a rough journey but I finally see the light at the end of the tunnel. I just recently redid the website and thought maybe the full story of how this project came to be would interest you all. Thank you for reading.
Work · Feb 2026 · wallstreetraider.com