oathe / scan / reports / caution
Agent skills and MCP servers to install with caution
These skills mostly behave. Each one has findings worth reading first.
A caution verdict is the most common outcome. The skill did roughly what it advertised, but the sandbox recorded something worth knowing — a broad permission, an undisclosed request, a dependency doing more than expected. Most of these are safe to install once you have read the findings.
Trust score 50–79 · 1,038 skills · Other verdicts: malicious · dangerous · safe · audit a new skill
Scores run 0–100. Every audit runs the skill in a sandbox and records what it actually does. How the audit works · What the verdicts mean