StepSecurity inventories agent skills across repositories and laptops
StepSecurity added Agent Skills inventories for developer machines and GitHub repositories. The product discovers skill folders used by 18 coding agents, records source and content hashes, flags bundled code, hooks and shell execution, and shows declared tool approvals and managed provenance where available.
Why it matters: Agent skills can travel from a laptop into a repository and execute with developer privileges while looking like documentation in review. A cross-device and repository inventory makes that supply-chain surface visible before a skill spreads further.