No. Trustabl works on top of your existing tools. It analyzes your code, documentation, and behavior, then generates enriched metadata and optional policy files without modifying your source code.
Most tools are fully hardened in under 60 seconds. You connect your GitHub repo, and Trustabl scans, enriches, and generates most of the metadata automatically.
Yes. OpenShell secures the runtime environment. Trustabl hardens the tools the agents call inside that environment. TAA automatically generates least-privilege policies, egress rules, binary requirements, and sandbox compatibility metadata that OpenShell can consume directly. Together they deliver defense-in-depth: secure runtime + production-hardened tools.
No. Skills (SKILL.md) teach the agent how to perform a task or workflow. Trustabl Agent Analyzer (TAA) makes the tools themselves reliable, safe, and production-ready. Skills focus on process. TAA focuses on resilience, validation, policy, observability, and supply-chain trust. The two are highly complementary — great skills need hardened tools underneath them.
