Paste your SKILL.md, upload a bundle, or import a public repo. Every submission runs through four independent scanner layers before it can reach the catalog. A single critical finding blocks publication, so the trust badge on a listed skill actually means something.
Trying the scanner? Paste a snippet with curl ... | bash or the phrase “ignore previous instructions” and watch it get blocked.
A critical finding blocks publication. Nothing goes live until the scan passes.