Security tools
Skill Scanner
Check agent skills for prompt injection, data exfiltration and malicious code patterns.
2.6K GitHub starsAs of Checked
Where it fits
What you can use it for
Teams that review third-party skills before agents use them.
Probe models and applications for security weaknesses.
Before you adopt
What to check for your team
The upstream project describes detection as best effort. No findings does not mean a skill is safe.
Get help evaluating the fitLicence and scope
Apache-2.0
The pinned license explicitly identifies Apache-2.0. Optional model providers and hosted scanning services have separate terms.
Read the upstream licenceSupport the work
Go directly to the maintainers
Use the project's contribution guidance to report issues, help with documentation or contribute code. Follow any published funding links if you want to support the maintainers financially.
Find contribution guidanceKeep exploring
