security-trust
Installation
SKILL.md
Security & Trust
Fixes the Security & Trust category of IsAgentReady.com. These checkpoints test the security baseline that agent protocols need, and the auth metadata that agents use to sign in.
- Methodology version:
2026-10-22. Methodology: https://isagentready.com/en/methodology - Scoring (weights and points): https://isagentready.com/api/v2/methodology/2026-10-22/scoring
- Full checkpoint data (stage, evidence type, verify command, rescan command): references/checkpoints.md
When to Use
- The scan shows failures in Security & Trust (legacy ids 5.x).
- HTTPS, HSTS, CSP or other security headers are missing.
- The public API needs a correct CORS policy.
- WebMCP tool definitions contain secrets or auto-submit risky forms.
- The site has a login and agents must find the OAuth metadata.