01 — Pricing
The scanner costs nothing. Trust Pack is a one-time purchase. There is no subscription.
Free
Open-source security scanner for AI agent skills.
MIT · Open Source · Local First
Trust Pack
Ninety audited skills and fifteen specialist agents across eight engineering domains. Signed releases. Deterministic builds. One command to install.
includes 12 months of updates
02 — How AgentScan compares
Same problem, opposite shape. Platform scanners are a subscription; AgentScan is a local tool plus a one-time pack. No vendor is named here.
| Dimension | AgentScan | Platform scanners |
|---|---|---|
| Where it runs | Local, on your machine | Cloud; your skills are uploaded |
| Account | None. No signup, no telemetry | Account and API token required |
| Free tier | The complete scanner | A funnel to a platform contract |
| How it decides | Deterministic, reproducible | Model-assisted; output can vary |
| Executes skills | Never | Some scans run the artifact |
| Verdict | Yours, on file:line evidence | Vendor dashboard verdict |
| Price | $0 scanner + $59 one-time pack | Per-seat platform subscription |
03 — Inside the pack
Trust Pack ships the professional engineering domains as one bundle, with fifteen specialist agents that orchestrate the reviews. Security, backend, frontend, devops, AI, documentation, research, and developer marketing.
Ninety skills. Fifteen agents. One license. One command to install.
Threat modeling, identity, injection, supply chain, Kubernetes, incident response.
API design, databases, SQL, caching, queues, resilience, Go.
React, accessibility, forms, Next.js, performance, TypeScript.
CI/CD, Docker, Terraform, Linux hardening, observability, deployment.
Agents, evals, RAG, MCP servers, prompts, fine-tuning, cost.
ADRs, API docs, architecture docs, onboarding, versioning.
Technology evaluation, benchmarking, decision memos, tradeoffs.
Positioning, pricing, launch, SEO and GEO, email, social.
04 — Roadmap
The scanner ships first. Trust Pack is the product. Everything after gets a price when it is real.
| Stage | What it is | Status | Price |
|---|---|---|---|
| AgentScan CLI | Local deterministic scan. JSON, SARIF 2.1.0, exit codes for CI. | Available now | Free |
| Trust Pack | Ninety audited skills and fifteen specialist agents across eight engineering domains. Signed releases, deterministic builds, one command to install. | Available now | $59 one-time |
| Verified badge | A public, timestamped audit trail per artifact. Scanned at commit. Findings and verdict shown. | Included with Trust Pack | — |
| Continuous verification API | Re-scan on change. Drift alerts. Revocation when a verified artifact turns bad. | In development | — |
05 — FAQ
A subscription sells continuous service. AgentScan has no server to run and no account to bill. The scanner is local, free, and open source. Trust Pack is a pack of files you own. Twelve months of updates are included, and nothing recurs after that unless you choose a renewal.
Ninety audited skills and fifteen specialist agents across eight engineering domains. Signed releases, deterministic builds, public audit reports, and twelve months of package updates. One license key activates the whole pack.
You keep everything you downloaded, forever. The included update period ends. A renewal option may appear later, but no recurring subscription is required today.
Yes. The AgentScan CLI will remain open source and free to use. The scanner is the product, and the pack is a separate one-time purchase.
Platform scanners run in the cloud, need an account, and sell per-seat contracts. AgentScan runs locally, needs no account, and sells a one-time pack. The comparison table above shows the structural difference without naming vendors.
No. Activate your purchase with a license key. No dashboard or online account is required.
No. The scanner uses regex, entropy, and structure. It never runs a skill. It never makes a network call.
By design. A person reviews each skill. We re-verify it on every release. The list stays small on purpose.
Something else? Ask it on GitHub.
It is free, local, and open source. It takes one command.
$ pipx install agentscan-cli
