SkillGuard
Why This is an Opportunity
76 confirmed malicious Claude Code skills have been found out of 3,984 audited — a 1.9% malware rate in a marketplace with 60,000+ skills. Arvid Kahl called skill discovery an unsolved problem to massive engagement. The security layer is completely missing and urgently needed as adoption explodes.
Key Pain Points
- •You found a cool Claude skill on GitHub but have no idea if it's safe to install on your machine
- •76 malicious skills were found and you have no way to check if the ones you already installed are clean
- •The skills marketplace has 60K+ entries and most are garbage — there's no quality signal
- •You want to publish skills for your team but need to verify they don't accidentally leak credentials or data
Original Discovery
A security scanner and quality auditor for Claude Code skills and CLAUDE.md configurations. You paste a GitHub URL or upload a skill file, and it performs static analysis for prompt injection vectors, data exfiltration attempts, excessive permission requests, and known malicious patterns. Returns a trust score, detailed security report, and suggested fixes. Also includes a browser extension that shows trust badges on GitHub repos and the Claude skills marketplace.
Ready to Build This?
Sign up to save this opportunity and get your personalized MVP kit. Includes domain name suggestions, boilerplate code, and AI prompts to build your MVP rapidly.
Free MVP kit • Domain finder • Starter code