Governed AI agent skills — one library, distributed to devs and exposed to remote agents over MCP.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.
Governed AI agent skills — one library, distributed to devs and exposed to remote agents over MCP.