skill-scanner

Skill Scanner is a security detection tool designed to identify threats in AI Agent Skills, focusing on prompt injection, data exfiltration, and malicious code patterns through a combination of static and behavioral analysis, as well as LLM-based semantic evaluation. Key features include multi-engine detection for enhanced coverage, a meta-analyzer to filter false positives, CI/CD readiness with SARIF output and pre-commit hook support, and an extensible architecture for custom analysis plugins. It is particularly targeted at OpenAI Codex and Cursor Agent Skills, ensuring compatibility with defined specifications while enabling scanning of non-standard formats.