Pinned and scanned.
Edge checks the exact version of each skill. A high or critical finding, or failures from two scanners, blocks it. One failed scanner is shown as disputed.
Edge / Security
Checked before it loads.
Edge scans every skill before your agent can load it. A scan cannot prove a skill is safe, so Edge shows security warnings. Your data has its own page: Privacy.
What the scan looks for.
Hidden characters, downloads piped into a shell, code that reads or sends your keys, reverse shells, miners, destructive commands, instructions that try to override your agent, and exposed secrets.
Updates get checked again.
A security check applies to one version. If a skill changes, the new version must pass its own checks before Edge loads it.
Scan your own skills.
Ask your agent to scan a local skill. Local scans run on your computer without network access. An optional Snyk scan sends the skill's files, your hostname and username, only if you choose it.
Your searches are protected.
Edge filters private details before storing search text, and stores that text encrypted with AES-256-GCM. Backups are encrypted. In activity logs, Pro keys appear only as short hash labels.
Found a problem?
Email fede@getedge.cc.
Full security rules: Safety
Looking for security skills for your own code? Browse them