Yes. OpenShell and Trustabl address different layers. OpenShell helps isolate the runtime; Trustabl’s analyzer checks agent code and configuration for reliability and safety issues before deployment. Automated OpenShell policy generation is planned for Trustabl Console, not part of the open-source scanner today.
The open-source analyzer can surface findings that are useful inputs to compliance work, but it does not certify SOC 2, GDPR, PCI, or other compliance on its own. Trustabl Console is the planned commercial layer for compliance mapping and signed governance snapshots.
Trustabl’s open-source Agent Reliability Analyzer scans AI agent repositories for reliability, safety, configuration, and tool-calling issues before production. Scanning runs locally with no account, code upload, network connection, or LLM. To generate code fixes, run trustabl enrich --input scan.json --repo . --diff --apply with your own Anthropic, OpenAI, or Google key; Trustabl shows the patch before applying the approved changes.
No. Skills (SKILL.md) teach the agent how to perform a task or workflow. Trustabl Agent Analyzer (TAA) makes the tools themselves reliable, safe, and production-ready. Skills focus on process. TAA focuses on resilience, validation, policy, observability, and supply-chain trust. The two are highly complementary — great skills need hardened tools underneath them.
