---
title: "Scan One Skill Endpoint"
method: GET
path: "/api/v1/public/scan/skill/{owner}/{repo}/{skill_path}"
tags: ["public-scan"]
---

# Scan One Skill Endpoint

`GET /api/v1/public/scan/skill/{owner}/{repo}/{skill_path}`

## Request

- Base URL: `https://agentavow.com` (the document declares no server; this is the origin it was published from)
- URL: `https://agentavow.com/api/v1/public/scan/skill/{owner}/{repo}/{skill_path}`
- Auth: none declared

Grade ONE skill inside a repo that holds many (e.g.
`/public/scan/skill/anthropics/skills/skills/pdf`). The skill is named by its
directory, or by its folder name when that is unambiguous.

## Path parameters

- `owner` string, required
- `repo` string, required
- `skill_path` string, required

## Query parameters

- `force` boolean: Bypass cache and force a fresh scan
- `behavioral` boolean: Force a fresh behavioral sandbox run

## Response `200`

Successful Response

- PublicScanResponse
  - `stale` boolean
  - `repo` string, required
  - `trust_score` integer, required
  - `security_score` integer
  - `trust_tier` string, required
  - `recommended_limits` RecommendedLimits, required
    - `requests_per_minute` integer, nullable
    - `max_tokens_per_call` integer, nullable
    - `require_user_confirmation` boolean
  - `scan_result` string, required
  - `verdict` string
  - `verdict_reason` string
  - `decision` string
  - `decision_final` boolean
  - `decision_reason` string
  - `findings` FindingsSummary, required
    - `critical` integer
    - `high` integer
    - `medium` integer
    - `total` integer
    - `categories` object
    - `suppressed_lines` integer
    - `items` SrcApiPublicScanRouterScanFinding[]
      - `category` string, required
      - `name` string, required
      - `severity` string, required
      - `file_path` string, required
      - `line_number` integer, required
      - `remediation` string
      - `shipped` boolean
      - `kind` string
      - `capability` string
      - `installed` boolean
  - `capabilities` object[]
  - `positive_signals` string[]
  - `grade` string: Deprecated legacy field; read decision, trust_score and certified.
  - `certified` object
  - `certified_mark` boolean
  - `certified_mark_reason` string
  - `coverage` object
  - `supply_chain` object
  - `coverage_gaps` object
  - `not_checked` string[]
  - `incident_history` object
  - `deprecation` string, nullable
  - `package_version` string, nullable
  - `published_at` string, nullable
  - `advisories` unknown[]
    - unknown
  - `behavioral_score_effect` object
  - `provenance` object
  - `surface_detail` object
  - `declared_scope` object
  - `env_reads` string[]
  - `package_coordinate` object
  - `tool_description` string
  - `long_description` string
  - `category_scores` object
  - `metadata` ScanMetadata, required
    - `files_scanned` integer
    - `files_total` integer
    - `sampled` boolean
    - `primary_language` string
    - `has_readme` boolean
    - `has_license` boolean
    - `has_tests` boolean
    - `is_mcp_server` boolean
  - `scanned_at` string, required
  - `cached` boolean
  - `tool_manifest_digest` string, nullable
  - `tool_digests` object
  - `tool_list` object[]
  - `skill_collection` object, nullable
  - `tool_drift` object, nullable
  - `jws` string, required
  - `algorithm` string
  - `key_id` string
  - `jwks_url` string
  - `entity_trust` object, nullable
  - `trust_envelope` object, nullable
  - `behavioral` object, nullable
  - `score_note` string
  - `gateway_info` object

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/agentavow/apis/agentavow-api.md) · [All operations](https://skmtc.dev/agentavow/apis/agentavow-api/llms.txt) · [OpenAPI document](https://skmtc.dev/agentavow/apis/agentavow-api/revisions/e1e20476dbfc?raw)