Enhanced malicious Skill detection tool. Analyzes whether a target skill poses security threats to users who install it.
-
Updated
Mar 19, 2026 - Python
Enhanced malicious Skill detection tool. Analyzes whether a target skill poses security threats to users who install it.
AVE - Agentic Vulnerability Enumeration. The open behavioral classification standard for agentic AI components.
Three portable Agent Skills for research, repository deployment, and pre-install safety review.
Open-source CLI scanner for agentic AI components such as skills, MCP servers, system prompts
SQS (Skill Quality Suite): linter, validator, security scanner and eval harness for AI Agent Skills (SKILL.md) on Claude Code, Codex, Cursor and Gemini CLI - and it tells you which skill to fix or write next from your own sessions
Decide once. Re-decide never. A Claude Code skill that evaluates skills before installing and persists every decision.
AI security toolkit for prompt injection detection, sensitive data protection, runtime monitoring, and threat intelligence for LLM and agent workflows.
LGD ecosystem: independent third-party evaluation for AI agent skills. Registered / Evidenced / Gated - a score that ends in a permission decision.
Audit AI skill safety before you ship. Static + semantic + adversarial audit pipeline for SKILL.md, Codex skill.yaml, Claude Code commands, and OpenCode. Free hosted tier on tarai.dev.
Public scorecards and leaderboard for evaluated AI agent skills. Reproducible evidence, not marketing claims.
Security auditor for AI agent skills — catches hidden-Unicode prompt injection, reviewer-subversion, data exfiltration & post-install drift that markdown-only vetters miss.
See what your AI-agent skills can actually do. Vouch audits every SKILL.md on your machine, explains each skill's capabilities in plain English, and flags the risky ones (destructive commands, secret exfiltration, prompt injection). Local, deterministic — like npm audit, but for agent skills.
Static security scanner for agent skills: A-F risk rating, safe zip scanning, CI-tested rules
One score, one permission tier. Static security + quality gate for AI agent skills (Claude Skills / MCP). Detects credential exfiltration, base-URL hijack, shell payloads.
A curated AI coding skill and hook pack for safe local workflows.
Static safety scanner for AI agent skills: detect prompt injection, curl-pipe-sh malware, credential theft before you install.
Claude Code skills for keeping a Claude Code setup safe: review a third-party skill before installing it, lint and evaluate your own skill descriptions, audit the context budget, build least-privilege permissions, author and test hooks, find skill collisions and portability problems. Drives the author's gate, lock, simulator and hook tools.
Codex Skill:审计 Skill 和 AI agent 工具包的脚本、密钥、外部网络、权限边界与供应链风险
Static security scanner for AI skills, agents, prompts, and MCP instruction files
Independent, local-only watcher for the AI-skill supply chain: flags bait-and-switch changes in the pages skills and MCP tools reference. Sends nothing anywhere. Python CLI.
To associate your repository with the skill-security topic, visit your repo's landing page and select "manage topics."