Quickstart

Add pre-flight safety checks to your agent in 60 seconds. Works with any agent that supports MCP (Claude Code, Codex, Cursor, Hermes, and more).

1. Request an API key

Looking up existing audits is free and needs no key. To run audits via the API/MCP, request access:

curl -X POST https://www.agentskillaudit.ai/waitlist \
  -H "Accept: application/json" \
  -d "[email protected]"

We review requests during beta and email approved developers a sk_live_... key with 100 free credits. Already have a key? Skip to step 2.

2. Add to your agent's MCP config

Your agent connects to the audit server and gets two tools: audit_skill and check_skill_url. The MCP server runs locally from this repo (clone it and install deps first):

{
  "mcpServers": {
    "ai-skill-audit": {
      "command": "python",
      "args": ["-m", "mcp_server.server"],
      "env": {
        "SKILL_AUDIT_API_KEY": "sk_live_...",
        "SKILL_AUDIT_API_URL": "https://www.agentskillaudit.ai"
      }
    }
  }
}

Run from the repository root so mcp_server.server resolves. A one-line npx install is coming soon. Prefer HTTP? Skip to the API reference below.

3. That's it

Your agent now checks every skill, repo, and install before executing it. No code changes. No prompt engineering. It just works.

When your agent is about to install a skill from skills.sh or clone a repo from GitHub, it automatically calls audit_skill. If the result is allow, it proceeds. If block, it stops and tells you why. If warn, it shows the findings and lets you decide.

API Reference

Prefer direct API calls? The REST API is always available.

# Run a full audit (sync — returns result immediately)
curl -X POST https://www.agentskillaudit.ai/api/v1/audits \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{"source_type":"url","source":"https://github.com/user/repo","sync":true}'

# Quick pre-flight check (instant, no credits spent)
curl "https://www.agentskillaudit.ai/api/v1/check?source=https://github.com/user/repo&source_type=url"

# Audit raw skill text before installing
curl -X POST https://www.agentskillaudit.ai/api/v1/audits \
  -H "Authorization: Bearer sk_live_..." \
  -H "Content-Type: application/json" \
  -d '{"source_type":"text","source":"skill markdown here...","sync":true}'

Full API docs: /docs