How to find, verify, and install AI skills you can trust.
Five steps, each independently checkable.
SXM badges appear on READMEs, marketplace listings, and documentation.
Every badge links to the SXM verification page. Click it to see the skill's current certification status.
Full evaluation scores, which tests were run, and when the skill was last re-certified.
Blockchain attestation is independently verifiable on Polygon. You do not need to trust SXM. You can verify it yourself.
Higher is better. A skill reconfirmed 12 times has survived 12 rounds of evolving threat patterns.
How you install depends on your platform.
Add to your project config or install via npm:
Or add to your MCP config file directly.
Follow the install instructions in the skill's repository. Each certified skill lists its install command on the skills page.
Passed all three pillars with a strong score. 90 overall and 85 security is the minimum for certification.
Does what it says. Handles edge cases. Consistent output across repeated runs. No silent failures.
Resists prompt injection, data exfiltration, and permission escalation. Zero exploits. The hardest pillar to pass.
Fast under load. No memory leaks. Reliable at scale. Output quality does not degrade under pressure.
Re-evaluated against X evaluator updates and still passed every time. Higher means more battle-tested.
We take every report seriously. A single valid security concern is enough to suspend a certification.