SkillFortify, a formal verification for AI agent skills

Hacker News

Hi HN, In January 2026, 1,200 malicious skills infiltrated the OpenClaw agent marketplace (ClawHavoc campaign). A month later, researchers catalogued 6,487 malicious agent tools that VirusTotal cannot detect. The first agent-software RCE was assigned CVE-2026-25253. The response: a dozen heuristic scanning tools (pattern matching, LLM-as-judge, YARA rules). They all carry the same caveat: "no findings does not mean no risk." SkillFortify takes a different approach. Instead of checking for known bad patterns, it formally verifies what a skill CAN do against what it CLAIMS to do. Five mathematical theorems guarantee soundness -- if SkillFortify says a skill is safe, it provably cannot exceed its declared capabilities. What it does: - skillfortify scan . -- discover and analyze all skills in a project - skillfortify verify skill.md -- formally verify against capability declaration - skillfortify lock -- generate skill-lock.json for reproducible configs - skillfortify trust skill.md -- compute trust score (provenance + behavior) - skillfortify sbom -- CycloneDX 1.6 Agent Skill Bill of Materials Supports Claude Code skills, MCP servers, and OpenClaw manifests. Evaluated on 540 skills (270 malicious, 270 benign): F1=96.95%, zero false positives. Paper: [ZENODO_DOI_URL] Install: pip install skillfortify Code: https://github.com/varun369/skillfortify Built as part of the AgentAssert research suite. Happy to answer questions about the formal model, threat landscape, or benchmark methodology.

Visit product View on Hacker NewsFeb 26, 2026

Share card

Actual performance

2points

2comments

Did not reach leaderboard

Launch Intel predictions

Analyze your own launch →

Product HuntOn track for Day 1 leaderboard · Strong signals: agent, claude, model · Missing: mac, agents, macos

84%84% predicted probability of success on Product Hunt, based on ML models trained on real launch data.

best fitHighest predicted score across all platforms for this description.

Indie HackersFits the IH revenue-focused audience · Strong signals: supports · Missing: reddit linkedin, podcasting, created

59%59% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.

TrustMRRLess likely to generate early MRR · Strong signals: month · Missing: mobile apps, ios, personal

48%48% predicted probability of success on TrustMRR, based on ML models trained on real launch data.

AppSumoMay struggle as an AppSumo deal · Missing: plus, platform, intuitive

27%27% predicted probability of success on AppSumo, based on ML models trained on real launch data.

Acquire.comPre-revenue stage for this audience · Strong signals: arr · Missing: mrr, revenue, profit

21%21% predicted probability of success on Acquire.com, based on ML models trained on real launch data.

Hacker NewsMay not resonate with HN audience · Strong signals: lua, io · Missing: https docs, excited, just released

12%12% predicted probability of success on Hacker News, based on ML models trained on real launch data.

nativeThis product was originally launched on this platform.

BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto

1%1% predicted probability of success on BetaList, based on ML models trained on real launch data.

Correct prediction on native model

Similar products

SkillPreflight – score AI agent skills before installing them33%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

SkillPreflight – score AI agent skills before installing them

Hacker News1

SkillRepo26%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Discover curated AI agent skills

Indie Hackers1ai

Skillkit77%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

The package manager for AI agent skills

Product Hunt+250Open Source

Novingly17%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Security scoring for AI agent skills. Score any public GitHu

Indie Hackers1ai

Ruby gem to create, validate, and package AI agent skills20%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Ruby gem to create, validate, and package AI agent skills

Hacker News1

AIAgentSkills17%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Claude Skills Marketplace — Discover AI Agent Skills

Indie Hackers

I scan AI agent skills for prompt injection before you install them21%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

I scan AI agent skills for prompt injection before you install them

Hacker News1

An LSP for agent skills–rename, references, completion, and diagnostics34%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

An LSP for agent skills–rename, references, completion, and diagnostics

Hacker News1

A Python CLI for Managing AI Agent Skills27%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

A Python CLI for Managing AI Agent Skills

Hacker News1

SkillGuard – scan agent skills for prompt injection payloads26%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

SkillGuard – scan agent skills for prompt injection payloads

Hacker News2

Browse all products Analyze your launch