skill-advisories

Open advisory database for AI agent skills, plugins, and MCP servers — OSV-style, machine-readable threat data for the agent ecosystem.

Browse advisories: https://akshay7273.github.io/skill-advisories/

Feed health: https://akshay7273.github.io/skill-advisories/health.html

Every advisory documents a malicious, vulnerable, or typosquatted agent skill, backed by at least one published public reference (vendor report, researcher writeup, or registry takedown).

Roadmap

The project is moving toward precise version-aware detection, verifiable threat feeds, OSV interoperability, and agent-native pre-install checks through MCP. See the public roadmap for milestones and acceptance criteria.

The feed (public API)

Consume the database directly — no install needed:

• Full feed: https://raw.githubusercontent.com/Akshay7273/skill-advisories/main/feed/feed.json
• Feed SHA-256 digest: https://raw.githubusercontent.com/Akshay7273/skill-advisories/main/feed/feed.json.sha256
• Fast lookup index (ecosystem:name → advisory ids): https://raw.githubusercontent.com/Akshay7273/skill-advisories/main/feed/index.json
• Compact feed: https://raw.githubusercontent.com/Akshay7273/skill-advisories/main/feed/compact.json
• Cursor-verified incremental update: https://raw.githubusercontent.com/Akshay7273/skill-advisories/main/feed/delta.json
• Advisory schema: schema/advisory.schema.json
• OSV-compatible index: feed/osv/index.json
• Multi-file checksum manifest: feed/checksums.txt
• Append-only publication history: feed/history.json

See the OSV export and verification guide for field mapping and integrity checks. Incremental consumers should follow the compact feed and delta protocol. References may carry archival evidence provenance, and every cited page is probed weekly for link rot. A downloaded copy can be checked against its own evidence with skill-advisories verify.

Try it in 30 seconds

npx @akshay7273/skill-advisories check better-polymarket

❌ 1 advisory match(es) across 1 skill(s) checked:
  better-polymarket [clawhub] → SKA-2026-0002 [critical] better-polymarket and polymarket-all-in-one hide a reverse-shell backdoor inside operational market-search code rather than install hooks.
      https://www.koi.ai/blog/clawhavoc-341-malicious-clawedbot-skills-found-by-the-bot-they-were-targeting
      https://www.antiy.net/p/clawhavoc-analysis-of-large-scale-poisoning-campaign-targeting-the-openclaw-skill-market-for-ai-agents/

That is a real advisory with real sources, and the command exits 1 so CI stops. A name with nothing against it prints a single line and exits 0. Nothing is uploaded: the feed is downloaded and matched locally.

To check what is already installed rather than a name you type, run npx @akshay7273/skill-advisories scan.