Skip to content
M.A.V.E.Ndocs

Skills & the security gate

Each console has a skills picker (the ⚡ control), and every install passes through a security gate before it goes live.

The picker

Section titled “The picker”

Two tabs:

  • Installed - multi-select skills for the session; hover a row for the trash button to uninstall it.
  • Find new skills - live skills.sh search with one-click install. Each Install adds exactly one skill - the one you clicked - never its same-named siblings.

Hermes uses its own registry instead of this picker.

The security gate

Section titled “The security gate”

Every install is scanned before it goes live. After you click Install, the skill is downloaded to a quarantine and checked by a three-tier validator, then a badge appears:

  • SAFE - installed automatically.
  • REVIEW - held back; expand the findings (rule, file, line), and if you trust it click Install anyway and type a reason (logged).
  • REJECTED - blocked and not installable - hard evidence of exfiltration, injection, or download-and-execute. The badge shows which sandbox backend ran (docker/bwrap/…).

This is what stops a malicious skill from injecting your agent or stealing credentials. The gate fails closed: if every install is rejected with “validator missing”, install python3 and run bash scripts/setup-skill-validator.sh.

See also

Section titled “See also”