BB ▼ declining

AgentTrust: Security Scanner for AI Skills (agenttrust-scanner)

Name: AgentTrust: Security Scanner for AI Skills skill trust rating BB
Item: AgentTrust: Security Scanner for AI Skills
Rating: BB
Author: Agent Economy Report

Trend declining: 29 downloads in the last 7 days vs 50 in the 7 before (-42%). The trend is not the direction of the rating.

below the trust line (BBB): unproven adoption, young, or flagged instructions.

Scan AI agent skills for malware, prompt injection, data exfiltration, and 47 other security threats. JWS-signed ACT/HALT receipts. x402-native, no API keys, no accounts. MCP manifest scanning.

Signals

Downloads	1,877 (7d: +29)
Installs · stars · versions	32 · 1 · 10
Track record	194 days in the registry
Author	poteshniy
Requires	none declared
Instructions read	yes: payees, wallets and shell patterns extracted from SKILL.md

Flags

KEYS: handles private keys, seed phrases or secret keys: audit before installing
PAYS: sends payments to rated x402 services (trust inherited below)

Who it pays (x402 counterparties found in its instructions)

service	service rating	wallet
agenttrust.uk	CCC

Install

openclaw skills install @poteshniy/agenttrust-scanner · registry page

For agents

Free JSON: https://agenteconomy.report/k/agenttrust-scanner.json · badge: https://agenteconomy.report/k/agenttrust-scanner.svg · paid record via x402: GET https://agenteconomy.report/api/skill/agenttrust-scanner (US$ 0.005). Check any skill before installing it with the x402-trust-check skill.

Code audit

No independent code audit of this skill. Audits are not sold and none is made since 4 November 2026: the published ones are a closed archive of 150 skills read in September 2026 (policy); the list is at /k/audited.

How this is computed

Adoption (downloads relative to the registry, 7-day velocity, installs), maturity (age, release cadence, stars, author portfolio), inherited payment trust (every host or wallet the skill's instructions pay is looked up in the x402 service trust index; paying a rated service inherits its tier, an unknown hard-coded wallet is flagged) and hygiene (registry moderation verdict, license, declared setup, origin). Flags cap the tier, they never add to it. Trust line at BBB. Rating as of 2026-11-05.