Trial
Security-first: every skill scanned for malware, prompt injection, and credential theft.
Why It Matters
skillsdirectory.com emerged as a direct answer to ClawHavoc. Every listed skill is scanned for malware, prompt injection, and credential theft. Skills are verified and graded. In a post-ClawHavoc world, a security-first registry is not paranoia — it is baseline hygiene. The catalog is smaller, but that's the point: trust over volume.
Strengths
- Multi-vector security scanning: malware, prompt injection, credential theft
- Verified and graded skills give a clear signal of trustworthiness
- Directly addresses the biggest risk in the skills ecosystem
- Smaller catalog is a feature, not a bug — everything listed has been vetted
Limitations
- Smaller catalog means you may not find niche skills here
- Scanning methodology is proprietary; independent audits would build more confidence
- Still relatively new; track record is short
Risks
- Proprietary scanning is a trust-me proposition — without independent verification, you're trading one trust problem for another
- "Security-first" is strong marketing, but no scanner catches every attack vector; false confidence is worse than honest uncertainty
- The business model is unclear — who's paying for continuous security scanning, and what happens when funding dries up?
- Grading skills is subjective; the criteria aren't transparent enough for security-conscious teams to validate independently