Terms of Service

SkillTotal ("the Service") provides automated static security analysis of publicly available software components (such as MCP servers, agent skills and plugins, and npm/PyPI packages). The Service is operated by an independent developer. By using the Service you agree to these terms. If you do not agree, do not use the Service.

The Service is provided "as is"

The Service and its reports are provided as is and as available, without warranties of any kind, express or implied — including fitness for a particular purpose, accuracy, or non-infringement. We may change, suspend, or discontinue any part of the Service at any time without notice.

Reports are informational only

Reports are produced by automated staticanalysis. They describe capabilities and patterns detected in a component's code; they do not prove malicious intent, and they can contain false positives and false negatives. A low risk score is not a guarantee of safety, and a high score is not an accusation against the component's authors. Reports are not security, legal, or professional advice; you remain solely responsible for decisions made based on them.

Acceptable use

You may only submit components that are publicly accessible and that you are permitted to analyze. You must not use the Service to violate any law, to overload or disrupt the Service (rate limits apply and may change), to probe or attack our infrastructure, or to submit content you have no right to share.

Caching and sharing of results

Scan results are cached and may be shown to other users who request analysis of the same component and revision. Do not submit anything confidential: the Service is designed for publicly available code.

Feedback

If you submit feedback (including finding verdicts), you grant us a perpetual, royalty-free license to use it to operate and improve the Service, including improving detection rules in our open-source engine.

Limitation of liability

To the maximum extent permitted by law, SkillTotal and its operator shall not be liable for any indirect, incidental, special, consequential, or exemplary damages, or any loss of profits, data, or goodwill, arising from your use of (or inability to use) the Service or its reports. Total aggregate liability is limited to the amount you paid for the Service (currently zero for the free tier).

Open-source engine

The underlying analysis engine is open source (Apache-2.0) and available on GitHub. These terms govern the hosted Service only; the engine itself is governed by its own license.

Changes and contact

We may update these terms; the "Last updated" date above reflects the current version. Continued use after changes means acceptance. Questions or requests: email contact@skilltotal.ai or use the Feedback button in the footer.