skill-scanner
Scan agent skills for security issues before adoption. Detects prompt injection, malicious code, excessive permissions, secret exposure, and supply chain risks.
Profile →npx skills add sickn33/agentic-awesome-skills --skill skill-scanner --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Skill Security Scanner Scan agent skills for security issues before adoption. Detects prompt injection, malicious code, excessive permissions, secret exposure, and supply chain risks. **Important**: Run all scripts from the repository root using the full path via `${CLAUDE_SKILL_ROOT}`. ## When to Use - You need to evaluate a skill for prompt injection, malicious code, over-broad permissions, or supply-chain risk before adopting it. - You want a static scan plus manual review workflow for a skill directory. - The task is to decide whether a skill is safe enough to trust in an agent environment. ## Bundled Script ### `scripts/scan_skill.py` Static analysis scanner that detects deterministic patterns. Outputs structured JSON. ```bash uv run ${CLAUDE_SKILL_ROOT}/scripts/scan_skill.py <skill-directory> ``` Returns JSON with findings, URLs, structure info, and severity counts. The script catches patterns mechanically — your job is to evaluate intent and filter false positives. ## Workflow ### Phase 1: Input & Discovery Determine the scan target: - If the user provides a skill directory path, use it directly - If the user names a skill, look for it under `plugins/*/skills/<name>/` or `
- When to Use
- Bundled Script
- scripts/scanskill.py
- Workflow
- Phase 1: Input & Discovery
- Phase 2: Automated Static Scan
- Phase 3: Frontmatter Validation
- Phase 4: Prompt Injection Analysis
- Phase 5: Behavioral Analysis
- Phase 6: Script Analysis
- Phase 7: Supply Chain Assessment
- Phase 8: Permission Analysis
- Confidence Levels
- Output Format
uv run ${CLAUDE_SKILL_ROOT}/scripts/scan_skill.py <skill-directory>
ls -la <skill-directory>/
ls <skill-directory>/references/ 2>/dev/null
ls <skill-directory>/scripts/ 2>/dev/nullWhat does the skill-scanner skill do?
Scan agent skills for security issues before adoption. Detects prompt injection, malicious code, excessive permissions, secret exposure, and supply chain risks.
How do I install it?
Run `npx skills add sickn33/agentic-awesome-skills --skill skill-scanner --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From sickn33/agentic-awesome-skills, a repository with 44,414 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.