What a scanner finds in 150 public Skills

These are public Skills from Anthropic, Hugging Face, Trail of Bits, Matt Pocock, Cursor’s pstack and the superpowers project, scanned on 2026-11-13 with the Oriant Skillscanner in static mode. The verdicts are the scanner’s own. A static scan flags what a Skill is able to do and produces false positives. The findings are here so you can judge.

Do not install
25
Caution
33
Safe
92

Method

Scanner: Oriant Skillscanner, static mode, no LLM. Scanned on 2026-11-13.

RepositoryStarsLicenceCommit
anthropics/skills193,953Set per Skill2c5958e
obra/superpowers317,038MIT22f0b46
huggingface/skills11,342Apache-2.025910b3
mattpocock/skills323,447MIT5863806
cursor/plugins/pstack16,172MIT6e359ce
trailofbits/skills8,168CC-BY-SA-4.0149d7b2

Which Skills are on your machines?

These are public Skills. The question for a company is which Skills are on its own machines.