skillwitness is a security and compliance CI gate designed for AI skills and agent extensions. It performs static analysis, generates SARIF reports, and checks supply chain integrity. The tool integrates into CI pipelines to prevent insecure AI components from reaching production.
skillwitness sits in PulseGate's LLM eval & observability category. It focuses on ensuring security and compliance of AI agent skills and extensions before they are deployed in CI/CD pipelines. skillwitness is an open-source project aimed at developers. skillwitness is open source under the Apache-2.0 license. skillwitness is available on the command line.
It is developed by 1stIndeXR, and it first shipped in 2026. Among its 4 catalogued features are Static Analysis, SARIF Output, and Supply Chain Security. It exposes integrations via an MCP server.
Summary written by a language model from the project’s public pages.
What PulseGate has recorded for this listing
Closest matches by what these projects do