Website terms of use for BlueSkills, operated by Bluethroat Labs.

BlueSkills is a static and dynamic scanner for Agent Skill packages. On this website you submit a pasted SKILL.md, a public GitHub or GitLab URL, or a .zip of the package. The scan reports whether that package looks CLEAN, SUSPICIOUS, MALICIOUS, invalid, or only partially analysed.

The report is not a warranty, not a sandbox for the agent you will actually run, and not permission to install a skill. Verdicts can be incomplete when a required stage does not finish; an incomplete scan is never a CLEAN result.

You must not submit private repositories, private package contents, malware for execution outside this scanner's sandbox, or content you are not allowed to share. Public GitHub and GitLab URLs only. Do not upload secrets, API keys, private keys, or .env files with real credentials.

This website rate-limits by network address and caps paid analysis per day. The Telegram bot uses identity-based daily limits (scans, issue reports, and BluePaper conversions). A Cloudflare Turnstile check may be required before a scan.

Bluethroat Labs may refuse, rate-limit, or drop submissions.