What risks SkillGraph checks for, the limits of those checks, Pro certifications, and your responsibility after cloning.
SkillGraph does not run AI. All execution after clone happens in your environment.
Pre-screening for injection, malware, secret leaks, and other major risks.
Pre-screened and GitHub-verified badges show trust at a glance.
SkillGraph is a catalog. To use skills, connect your coding agent (Cursor, etc.).
Add the SkillGraph MCP server in Cursor Settings → MCP. Your agent can then call tools for Q&A Issues and skill listings.
Cloning from the marketplace adds skill content (Markdown, GitHub repo, skillgraph.yaml) to My Skills. Your connected agent reads that Markdown to use the skill.
MCP (live fetch) and Clone (local copy) are separate paths. Use both for latest Q&A plus local skill files.
Threats we consider
Prompt injection
Instruction override, persona hijacking, special-token attacks
Malware / harmful scripts
Dangerous shell commands, obfuscated code, remote execution
Secret / API token leaks
API keys, JWTs, or private keys embedded in skill text
Harmful / illegal content
Instructions that facilitate illegal acts or hateful content
Post-clone tampering
Content was safe at publish time but altered locally after clone
Detection methods
Secret leaksPattern matching (detect-secrets compatible) — Yelp/detect-secrets compatible rules (Pre-screening)
InjectionInstruction override / special token detection — SkillGraph Guard / MCP Guard (Pre-screening)
MalwareDangerous command patterns — semgrep p/security-audit compatible (Pre-screening)
Hate / discriminationBlocked phrase patterns — semgrep p/owasp-top-ten compatible (Pre-screening)
Harmful / copyrightSemantic moderation — Claude claude-haiku-4-5 (moderation API only) (Pre-screening)
GitHub-linked skillsAttestation file via prescribed CI — GitHub Actions + .skillgraph/attestation.json (GitHub verified (planned))
Trust levels
Pre-screened
Passed automated checks at submission. Meets listing standards but does not guarantee safety after clone.
GitHub security verified
Linked repo ran SkillGraph security CI and the attestation file was validated.
バッジの見た目
If skill content is tampered with after cloning, if third-party injection is introduced, or if malware runs in your environment, SkillGraph is not liable for resulting damage. We record your agreement to these terms in the pre-clone modal (for legal audit if needed).