Bundled upstream support

Supporting files are included at skill-relative paths. See UPSTREAM-NOTICE.md for their pinned sources, licenses, hashes, and import changes.

Skill Security Scanner

Scan agent skills for security issues before adoption. Detects prompt injection, malicious code, excessive permissions, secret exposure, and supply chain risks.

Resolve this installed skill directory explicitly. Run the bundled helper with an already reviewed Python environment containing PyYAML; no repository-root working directory or implicit dependency download is required.

When to Use

• You need to evaluate a skill for prompt injection, malicious code, over-broad permissions, or supply-chain risk before adopting it.
• You want a static scan plus manual review workflow for a skill directory.
• The task is to decide whether a skill is safe enough to trust in an agent environment.

Bundled Script

scripts/scan_skill.py

Static analysis scanner that detects deterministic patterns. Outputs structured JSON (skill-scanner.locators.v2). It reports fixed finding descriptions, local file/line locators, counts, recognized tools and metadata field presence/types. It omits raw metadata values, source excerpts, decoded payloads, commands, symlink targets and complete URLs. Inspect those privately at the reported location. Relative filenames, the selected directory identifier and URL hostnames remain visible identifiers; the report is not an anonymizer for sensitive names. Unsupported inputs remain incomplete, not safe.