Trust and safety

How we check skills

Every skill gets a once-over before it shows up on BotPlaza. Here's what that covers, and what it doesn't.

What we check before listing

• Data access is declared. Each skill lists what it reads and what it writes or sends. That list becomes the “What this skill can touch” card on its page.
• No sending without a draft. A skill can draft an email, a message or a form, but it has to show you and wait for your OK before anything goes out.
• A cost estimate. We note how often it runs and how heavy each run is, so your agent plan has no surprises.
• A privacy scrub. Previews and setup text are checked for real names, addresses and personal details.
• It gets reviewed. Every new skill, and every change to one, arrives as a pull request that is reviewed before it merges.

What we don't guarantee

We check the skill, not your assistant. A skill is a set of instructions, and the assistant running it can still misread a page, get a fact wrong or behave differently after an update. Costs are estimates.