CertiK, a prominent player in blockchain and AI security, has unveiled its latest innovation: the CertiK Skill Scanner. This cutting-edge security solution is tailored to safeguard the burgeoning ecosystem of AI Agents and third-party AI Skills, addressing the pressing need for enhanced security measures in this rapidly evolving landscape.
Enhancing Security for AI Skills
The CertiK Skill Scanner is designed with a diverse audience in mind, including AI Skill marketplaces, enterprises, developers, and ultimately, everyday users who seek clarity regarding the risks associated with third-party AI tools. As AI Agents increasingly permeate financial systems, enterprise workflows, and daily digital interactions, the importance of a robust security model around these third-party Skills cannot be overstated.
Ronghui Gu, CEO and Co-Founder of CertiK, emphasized the necessity of establishing a standardized trust layer prior to execution. “This tool enables users and platforms to identify hidden risks before sensitive data, assets, or systems are compromised,” he noted.
Unlike conventional AI scanning tools, the CertiK Skill Scanner focuses on evaluating risks that may arise during actual execution, particularly in scenarios involving fund calls and financial transactions. Its versatility allows it to be utilized across both Web3 and traditional Web2 ecosystems.
Integration and Accessibility
AI Skill marketplaces can seamlessly integrate the CertiK Skill Scanner into their publishing pipelines, ensuring that Skills undergo automatic reviews before going live. Additionally, these marketplaces can showcase CertiK’s security verdicts as trust indicators, aiding end users in their evaluations of third-party Skills.
For enterprises, deploying the scanner as part of internal compliance and risk management workflows allows for thorough assessments of third-party AI Skills prior to their introduction into production or internal environments. Independent developers can also leverage the scanner for self-auditing Skills before publication. Future updates will further democratize access, enabling everyday users to scan Skills prior to installation or use.
The scanner produces a scored assessment ranging from 0 to 100, accompanied by verdicts of “pass,” “warn,” or “fail,” along with a categorized findings list based on severity. CertiK claims that the system achieves an impressive 90.5% precision in identifying security risks, significantly reducing false positives and enhancing the reliability of AI Skill risk assessments.
Expanding the Ecosystem
Already deployed within select Web3 AI Agent infrastructure environments, the CertiK Skill Scanner is set to expand its integrations with additional AI Skill platforms, including FinChip.ai. Gary Yang, an Incubation Investor at FinChip.ai, remarked on the importance of trust in the skill economy, stating, “CertiK’s work on skill security verification is exactly what this ecosystem needs.”
Gu further elaborated on the evolving landscape of AI applications, highlighting the shift towards more autonomous execution. “This evolution brings forth a new category of security and trust challenges. We believe that security infrastructure for the AI era must be proactive rather than reactive,” he stated. The overarching goal is to make professional-grade security assessments accessible prior to execution, catering to enterprises, developers, and everyday users alike.
This launch is part of CertiK’s broader strategy to enhance AI-focused security infrastructure. Earlier this year, the company introduced its AI Auditor initiative, which aims to tackle emerging risks associated with autonomous systems and AI-driven execution environments.
About CertiK
Founded in 2017 and headquartered in New York, CertiK has established itself as the largest Web3 security service provider. The company has evolved into a trusted risk management partner for regulators, institutions, and Web3 innovators globally.
CertiK offers comprehensive risk management solutions that integrate into the System Development Life Cycle (SDLC) of institutional clients, encompassing Blockchain infrastructure assessments, custody architecture reviews, penetration testing, code audits, formal verification, and compliance support.
To date, CertiK has collaborated with over 5,000 enterprise clients, including notable names such as Binance and Ant Group, as well as leading banks across Europe, France, and Singapore. The company also engages closely with regulators and financial institutions, contributing to policy development and regulatory consultation efforts.
Contact
Elisa Yiting Xu
Email: yiting.xu@certik.com
