01 — Pricing
The scanner costs nothing. The Trusted Distribution is a one-time purchase. Maintenance keeps it continuously verified for $9/month.
Free
The open-source scanner.
MIT · no account · no telemetry
Trusted Distribution
A continuously audited distribution of AI agent skills. Human review, signed releases, one command to install.
includes 12 months of updates
Maintenance
You own the distribution. This keeps it audited, updated, and maintained — month to month.
cancel anytime
02 — Roadmap
The scanner ships first. The distribution is the product. Maintenance keeps it verified, month to month. Everything after gets a price when it's real.
| Stage | What it is | Status | Price |
|---|---|---|---|
| AgentScan CLI | Local deterministic scan. JSON, SARIF 2.1.0, exit codes for CI. | Available now | Free |
| Trusted Distribution | Continuously audited AI agent skills, signed and human-reviewed. | Available now | $49 one-time |
| Maintenance | Monthly subscription: rescans, new verified skills, compatibility updates, advisories, revoked-skill alerts. | Available now | $9/month |
| Verified badge | Public, timestamped audit trail per artifact — scanned at commit, findings, verdict. | Included with distribution | — |
| Continuous verification API | Re-scan on change, drift alerts, revocation when a verified artifact turns bad. | In development | — |
03 — FAQ
Revenue is verification, not curation — an independent auditor never sells the thing it audits. The scanner is the Let's Encrypt of agent skills: free so the whole ecosystem uses it, and the paid layer is the verification record itself, not the tool.
A continuously audited distribution of AI agent skills: human review on every listing, security audit reports, signed releases, a one-command installer, commercial use, a public audit history, and 12 months of updates. You're paying for maintenance and review — not markdown files.
For Trusted Distribution owners. $9/month keeps the distribution continuously audited, updated, and maintained: security rescans, new verified skills, compatibility updates, advisories, revoked-skill notifications, and audit database updates. You already own the distribution — this keeps it verified, month to month. Cancel anytime.
Ownership and upkeep are different things. The $49 purchase buys the distribution — it's yours. Maintenance is the ongoing work of keeping it verified, which is naturally a subscription. You can own it without subscribing; subscribing just keeps it current.
No. The scanner is deterministic — regex, entropy, structure. It never runs a skill and never calls out.
By design. Every listed skill is human-reviewed and re-verified on each release. Fifty skills we can defend beat five thousand we can't.
Something else? Ask it on GitHub.
Free. Local. Open source. It takes one command.
$ pip install scanaskill