Metano SkillTracer: SAST and DAST for Skills

Learn how Metano SkillTracer uses SAST and DAST to scan agent skills for malicious code before loading, mapping findings to OWASP Agentic and MITRE ATLAS.

Overview

SkillTracer scans agent skills (SKILL.md files) and scores them malicious or safe before an agent ever loads them. It combines static analysis of the markdown with live detonation in a sandboxed agent, then maps findings to OWASP Agentic and MITRE ATLAS.