SkillTriage

The pre-install gate for AI agent skills. Paste a SKILL.md, an .mcp.json, or any skill / MCP file and get a clear verdict — install, review, or do not install — from the same MoorAI detection engine that guards agents at runtime. Content-free by construction: we never store what you submit, only a hash and the threat categories.

We never store your submission. Scans are of public artifacts — your private work stays on your device.

Scan a package

Name a published MCP server package or a GitHub-hosted skill. We fetch that exact artifact, verify the registry checksum where one exists, and analyse it. Only the package name and version are sent to the registry.

…or paste a file

…or choose a file to load into the box — read in your browser, never uploaded until you press Scan.