{"repo":"cisco-ai-defense/skill-scanner","free":true,"listed":false,"github":"https://github.com/cisco-ai-defense/skill-scanner","clone":"git clone https://github.com/cisco-ai-defense/skill-scanner.git","description":"Security Scanner for Agent Skills","language":"Python","stars":2445,"topics":["agent","agent-skills","security"],"license":null,"category":"security-tools","readme_excerpt":"Skill Scanner A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. Combines pattern-based detection (YAML + YARA), LLM-as-a-judge , and behavioral dataflow analysis to maximize detection coverage of probable threats while minimizing false positives. Important: This scanner provides best-effort detection, not comprehensive or complete coverage. A scan that returns no findings does not guarantee that a skill is free of all threats. See Scope and Limitations below. Supports OpenAI Codex Skills and Cursor Agent Skills formats following the Agent Skills specification. With --lenient , also scans non-standard formats such as Claude Code .claude/commands/ .md and flat markdown skill repos. --- Highlights - Multi-Engine Detection - Static analysis, behavioral dataflow, LLM semantic analysis, and cloud-based scanning for layered, best-effort coverage - False Positive Filtering - Meta-analyzer significantly reduces noise while preserving detection capability - CI/CD Ready - SARIF output for GitHub Code Scanning, reusable GitHub Actions workflow, exit codes for build failures - Pre-commit Hook - Standard pre-commit framework integration to scan skills before every commit - Extensible - Plugin architecture for custom analyzers Join the Cisco AI Discord to discuss, share feedback, or connect with the team. --- Scope and Limitations Skill Scanner is a detection tool. It identifies known and probable risk patterns,","default_branch":null,"files":null,"tree":[],"storefront":"/r/cisco-ai-defense","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/cisco-ai-defense/skill-scanner/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}