Terms of Service

Skills listed in the SkillVault registry have passed our 2-stage automated security pipeline (pattern scan + LLM semantic analysis). However, passing our scans does not guarantee that a skill is safe or free from malicious behaviour. No automated security analysis is infallible.

You are responsible for evaluating any skill before installing it in your AI agent environment. SkillVault provides security signal, not security guarantees.

The SkillVault platform and all skills in the registry are provided “as is” and “as available” without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement.

To the maximum extent permitted by applicable law, SkillVault shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the platform or any skill obtained through it.

We reserve the right to remove, delist, or re-scan any skill in the registry at any time, for any reason, including but not limited to:

• Discovery of newly identified security threats or IoC matches
• Takedown requests from legitimate rights holders
• Violations of these terms by the skill publisher
• Changes to the skill's content that alter its risk profile

Removal from the registry does not imply any determination of wrongdoing by the skill author.

You agree not to use SkillVault to:

• Submit malicious or intentionally harmful skills for scanning or listing
• Attempt to circumvent, overload, or disrupt the scanning pipeline
• Scrape or systematically extract data from the registry beyond normal usage
• Use the platform for any unlawful purpose or in violation of applicable regulations

Free scans performed via the public scan tool produce a security report stored in our database. This report (without personally identifying information) may be made publicly accessible as part of the security record for that skill URL.

Scan results reflect the state of the skill at the time of scanning. SkillVault does not continuously monitor skills between scans.

SkillVault's platform, branding, and proprietary scanning pipeline are owned by SkillVault. Skills submitted to the registry remain the property of their respective authors. By submitting a skill, you represent that you have the right to allow us to scan and publicly display its security report.

We may update these terms as the platform evolves. Changes will be posted on this page with an updated date. Continued use of SkillVault after changes constitutes acceptance of the updated terms.

Questions about these terms: support@skillvault.sh