Agent skills & MCP skill-recorder
Is skill-recorder safe?
Short answer: No issues found. StackGrade's weekly scan of microsoft/skill-recorder found no issues: no critical-severity dependency advisories, no downloading install hooks, no remote-code patterns and no risky agent instruction files. It does list 9 high-severity advisories in runtime dependencies, which don't change the label. Automated scan of commit b05d590 on 2 Nov 2026, not a manual audit.
Updated : the last week its score, rank or safety result changed.
Desktop app that records a work session and turns it into a reusable agent Skill or automation.
- 5,640 stars
- pushed 31 Oct
- MIT
- TypeScript
#52of 52 overall#9in Agent skills & MCP▼ 3 vs Week 44
- Maintenance 30%38
- Adoption 30%1
- Docs 20%29
- Community 20%–
Score over the last 4 weeks: 18, 29, 25, 22.
All checks clean in the scan of 2 Nov 2026.
How this score works
Each part is a percentile among all 52 tracked tools, so 50 is average for this list. Community is not measured yet; the score uses the other 80%.
- Maintenance: Last push 31 Oct 2026. Last 10 GitHub releases within 53 days (about 5.1 per 30 days), latest release 21 Sept 2026. Issue close time: fewer than 5 closed issues, so not used.
- Adoption: 5,640 stars (70%), 644 forks (30%).
- Docs: README 13,195 characters, 14 headings, 2 code blocks, install section: yes.
#9 of 9 in Agent skills & MCP
Ranked by score. The yellow row is this tool.
- 1Superpowers#13 overall62No dependencies scanned
- 2Context7#19 overall57Caution
- 3Agent Skills#25 overall53No issues found
- 4MCP reference servers#29 overall48No issues found
- 5awesome-mcp-servers#30 overall47No dependencies scanned
- 6Playwright MCP#32 overall45No issues found
- 7wshobson/agents#38 overall42No issues found
- 8GitHub MCP Server#40 overall41No issues found
- 9skill-recorder#52 overall22No issues found
Safety scan, 2 Nov 2026
Automated scan of commit b05d590, 231 files. Not a manual audit.
No issues found
- 0Critical dependency advisories9 high, 8 medium, 2 low. OSV, runtime dependencies only.
- 0Install hooksNo npm install scripts found.
- 0Remote-code patternsFor example eval(fetch(…)).
- 0Agent files checked0 phrases flagged for review.
- 1curl | sh installersIn docs or program code. Information only.
Why this label?
No issues found by the automated scan.
Known vulnerabilities in runtime dependencies (OSV): 0 critical, 9 high, 8 medium, 2 low
Also found (informational, does not change the label):
- 9 high-severity known vulnerabilities in runtime dependencies (OSV)
- Documents curl|sh style installer (1 occurrence, e.g. INSTALL.md)
Notes:
- 16 affected packages only in dev/test/docs manifests, not counted
- Telemetry/analytics references in code: telemetry
Automated scan of commit b05d590 on 2 Nov 2026, not a manual audit. 231 files checked. What we check
Repo activity
From the GitHub API, fetched 2 Nov 2026.
- 8Releases, 90 daysLatest v0.7.0, 21 Sept
- –Median issue closeFewer than 5 closed issues
- 5.6kStars+532 since 26 Oct
- 644Forks48 open issues
- 2026Repo created29 Jul 2026
0 releases in the last 30 days (GitHub releases feed, last 10 entries).
Questions about skill-recorder
Answers use this week's StackGrade data.
Is skill-recorder safe to use?
No issues found. StackGrade's weekly scan of microsoft/skill-recorder found no issues: no critical-severity dependency advisories, no downloading install hooks, no remote-code patterns and no risky agent instruction files. It does list 9 high-severity advisories in runtime dependencies, which don't change the label. Automated scan of commit b05d590 on 2 Nov 2026, not a manual audit.
How does StackGrade score skill-recorder?
skill-recorder scores 22 out of 100 in Week 45: #52 of 52 tracked tools overall and #9 in Agent skills & MCP. The score combines maintenance (38), adoption (1) and docs (29) as percentiles among all 52 tracked tools; community (20% weight) is not measured yet, so the score uses the other 80%. It is not a hands-on test and it is separate from the safety label.
What are the alternatives to skill-recorder?
The highest-scored other tools in Agent skills & MCP this week: Superpowers (62, No dependencies scanned), Context7 (57, Caution), Agent Skills (53, No issues found), MCP reference servers (48, No issues found). StackGrade has not tested them hands-on.
What licence does skill-recorder use?
The licence listed for microsoft/skill-recorder is MIT. Read the licence text before commercial use.
Compare and use it
Side by side
Used in 1 AI use case
All facts and sources
- Type
- AI tool
- License
- MIT
- Language
- TypeScript
- Created
- 29 Jul 2026
- Owner
- microsoft (Organization)
- Forks
- 644
GitHub description: “Desktop app that records your on-screen work session and uses the GitHub Copilot SDK to reconstruct it as an intent + ordered steps, then builds a reusable Skill or Automation for Microsoft Autopilots like Scout, Microsoft Copilot Cowork, or Copilot Studio.”
Sources: github.com/microsoft/skill-recorder, api.github.com/repos/microsoft/skill-recorder, raw.githubusercontent.com/microsoft/skill-recorder/main/READ. Fetched 2 Nov 2026.
Know when skill-recorder changes label
One email a week: the new top 10, the biggest score changes and every safety label that changed.
Free. Double opt-in: you confirm by email first, unsubscribe in one click.