"skill-comply" is not named by any source, so no product here is confirmed as that exact tool. The closest matches for checking and scanning agent skills are SkillTotal, a static scanner for agent skills 5, and the skill-scanner action indexed under Sentry 2, which scans agent skills for security issues.
A question back: Do you mean a skill named skill-comply that checks whether agent skills follow their specification or compliance rules, and which agent platform are you using?
- 1
SkillTotalskilltotal.aiwebsite read, tools not yet checked
Free static scanner for MCP servers and agent skills that finds prompt injection, tool poisoning and exfiltration with file:line evidence 5.
official:MCP server · SkillTotal+1 community tools built for it
- 2
Sentrysentry.ioverified and signed
Its indexed skill-scanner action scans agent skills for security issues and audits them on request 2.
official:MCP server · @sentry/mcp-serverSDK · @sentry/nodelibrary · debugidCLI · sentry-clipackage · @sentry/junior-amplitude+49 community tools built for it
for agents: skill-scanner · skill-writer · sentry-sdk-skill-creator
- 3
GitHubgithub.comverified and signed
Its indexed agent-owasp-compliance action checks an AI agent codebase against the OWASP Agentic Security Initiative Top 10 risks 1.
official:MCP server · @github/mcp-registrySDK · @github/copilot-sdklibrary · CodeQL: StubCLI · specifyrepository · copilot-engine-sdk+2,577 community tools built for it
for agents: agent-owasp-compliance · microsoft-skill-creator · make-skill-template
Sources
- 1GitHub · Change is constant. GitHub keeps you ahead. · GitHub · GitHubgithub.com · read 2026-10-29
- 2Sentry Docs | Application Performance Monitoring & Error Tracking Softwaredocs.sentry.io · read 2026-10-29
- 5MCP Server & Agent Skill Security Scanner · SkillTotalskilltotal.ai · read 2026-10-29
For agents: the 10 actions behind this answer
agent-owasp-compliance · agent-owasp-compliance verified and signed
Check any AI agent codebase against the OWASP Agentic Security Initiative (ASI) Top 10 risks. Use this skill when: - Evaluating an agent system's security posture before production deployment - Running a compliance check against OWASP ASI 2026 standards - Mapping existing security controls to the 10
skill-scanner · skill-scanner verified and signed
Scan agent skills for security issues. Use when asked to "scan a skill", "audit a skill", "review skill security", "check skill for injection", "validate SKILL.md", or assess whether an agent skill is safe to install. Checks for prompt injection, malicious scripts, excessive permissions, secret expo
checker · typing verified and signed
maintain-verification-skill · maintain-verification-skill verified and signed
Periodic pass that keeps a project's verification skill and feature map honest: parallel source readers per feature, one live session driving every feature, at most one PR of proven corrections. Use for /maintain-verification-skill or "audit the verify skill".
· SkillTotal website read, tools not yet checked
Free static scanner for MCP servers, agent skills and npm/PyPI packages. Finds prompt injection, tool poisoning and exfiltration with file:line evidence.
agent-experience · agent-experience verified and signed
Audit the developer experience of a product, SDK, docs site, or SKILL.md by dropping multiple Claude subagents at it with only a tiny task prompt and real tools (WebFetch, Bash, Write). Agents must discover the docs themselves, install deps, ask for credentials if needed, and attempt real execution.
· SkillMD website read, tools not yet checked
Discover, save, and install thousands of safety-reviewed Agent Skills for Claude Code, Cursor, Codex and 60+ more agents. Free to search, save and install.
get_skill · implementation-skills found in code, not yet checked
The full guidance for one skill, by name. Use list_skills first to pick the name.
figma-use-figjam · figma-use-figjam verified and signed
This skill helps agents use Figma's use_figma MCP tool in the FigJam context. Can be used alongside figma-use which has foundational context for using the use_figma tool.
list_skills · OpenAccountants found in code, not yet checked
List published skills with their quality tier and verifier.
Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.