cccskills Releases Chaos Map of AI Agent Security Skills: 6,898 Tools Categorized into 13 Domains
cccskills published a chaos map categorizing 6,898 AI agent security skills, though its safety ratings rely on SKILL.md descriptions rather than code audits.
The Japanese AI agent skill search platform cccskills released the "AI Agent Security Skill Chaos Map October 2026 Edition" in October 2026. The map filters 6,898 skills (involving 947 repositories and 814 authors) from the 97,647 public skills indexed by cccskills, selecting those with "security" in their name or description, and categorizes them into 13 domains including vulnerability assessment, code auditing, threat modeling, malware analysis, and cloud supply chain.
These skills are instruction files (SKILL.md) read by AI agents like Claude Code and OpenAI Codex, granting the agents permission to execute commands or modify files. Following reports of malicious skills being distributed in public registries in early 2026, the map specifically isolates tools designed to inspect skills before execution—such as NVIDIA's SkillSpector and Cisco's skill-scanner—into a separate domain, while marking skills published by companies like OpenAI, Anthropic, and Google as "official."
It is important to note that the safety assessments displayed on the cccskills web version are determined based on text descriptions within SKILL.md files, not actual audits of the underlying code. For development teams looking to integrate security functions into their workflows, the map offers a quick way to identify official sources versus third-party inspection tools, but caution remains necessary when trusting the specific security of any given skill.