Pochi
TabbyML's autonomous coding agent, available as a VS Code extension and CLI.
TabbyMLHow skills run on Pochi
Pochi reads and writes files, executes commands, searches the codebase, and isolates each task in its own Git worktree, with GitHub issue and pull request integration. A skill it loads speaks into that tooling, so unvetted instructions can reach both repository and remote.
Skill security, assessed
Every public skill in our index is assessed by the Anomity Skill Intelligence engine against its real source: remote code execution, credential and data exfiltration, prompt injection, and unsafe installers.
Govern the skill layer on Pochi
Scanning a skill before use tells you what it claims to do. Anomity's Endpoint Sensor sees what agents actually do at runtime: it discovers every skill, agent, and MCP server on the endpoint, and policy can allow, deny, or log the tool calls a skill triggers on Pochi and every other agent. Violations route to your SIEM, Slack, email, or Jira with a queryable 90-day audit trail.
Book a 30-minute demo to see your own agent and skill inventory.
