26.1% of 42,447 Agent Skills Have Security Vulnerabilities — Large-Scale Empirical Study

Academic research scanning 42,447 agent skills across multiple registries found 26.1% exhibit at least one security vulnerability, with 14 distinct patterns. Snyk ToxicSkills audit independently found 13.4% of ClawHub skills contain critical issues.

Product Idea from this Signal

A pre-install verification gate that formally proves an AI agent skill cannot exceed its declared capabilities before allowing it onto your system

13.0k ▲

26.1% of agent skills across major registries have at least one security vulnerability according to a 42,447-skill empirical study. Snyk found 13.4% of ClawHub skills contain critical issues. Current scanners use pattern matching and heuristics, which miss novel attack vectors. This tool uses formal verification to mathematically prove that a skill's actual behavior matches its declared capability set, blocking installation if the proof fails. It sits as a pre-install gate in the OpenClaw skill lifecycle.

CLIOPEN-SOURCESECURITYDEVTOOLFORMAL-VERIFICATION

CompetitiveView Opportunity →