[free_bip]

Who is scanning these skills for malware? This seems like a prime target for malicious actors.

[ru552]

Virustotal at upload and periodically during the day

[Nextgrid]

VirusTotal is completely useless for this though? You need enough people to be pwned by that particular piece of malware for it to be flagged as dangerous, by which point the attackers would've already repacked it so it doesn't match the previous signature.

[dpoloncsak]

These are single-file .MDs, right? Written in markdown...

Can't you just read it?

[writeslowly]

I see a number of uploaded skills on the site with bash and python scripts. No idea what runs them