skill-scanner
Fail
Audited by Runlayer on Mar 5, 2026
Risk Level: HIGH
Scan Summary
Flagged Files (3)
skill-scanner/references/dangerous-code-patterns.mdHIGH
94.3%
Malicious tool definition detected
skill-scanner/SKILL.mdMEDIUM
82.4%
Malicious tool definition detected
List the skill structure: ```bash ls -la <skill-directory>/ ls <skill-directory>/references/ 2>/dev/null ls <skill-directory>/scripts/ 2>/dev/null ``` ### Phase 2: Automated Static Scan Run the bundled scanner: ```bash uv run ${CLAUDE_SKILL_ROOT}/scripts/scan_skill.py <skill-directory> ``` Parse the JSON output. The script produces findings with severity levels, URL analysis, and structure information.
skill-scanner/scripts/scan_skill.pyLOW
63.4%
Tool passed security scan
Passed Files (2)Click to expand
skill-scanner/references/prompt-injection-patterns.mdOK
7.2%
Tool passed security scan
skill-scanner/references/permission-analysis.mdOK
3.8%
Tool passed security scan
Audit Metadata