cisco-ai-defense/skill-scanner

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

2460 stars · 312 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A security scanner for AI agent skills that detects prompt injection, data exfiltration, and malicious code patterns using pattern-based detection (YAML + YARA), LLM-as-a-judge analysis, and behavioral dataflow analysis. It supports OpenAI Codex Skills and Cursor Agent Skills formats, integrates with CI/CD via SARIF output, and offers a plugin architecture for custom analyzers.

Use cases

• scan agent skills for prompt injection before installing them
• detect data exfiltration in AI agent skill packages
• find malicious code patterns in Claude Code or Codex skills
• add security scanning of agent skills to a GitHub Actions pipeline
• audit skill repositories for hardcoded secrets and obfuscation
• check agent skills for vulnerable dependencies via OSV.dev
• run pre-commit scans on skill markdown files

When to choose

• you install or distribute AI agent skills and want to vet them for threats
• you need CI/CD integration with SARIF output for GitHub Code Scanning
• you want layered detection combining static analysis, behavioral dataflow, and LLM review
• you need to scan multiple skill formats including Codex, Cursor, and Claude Code commands

When to avoid

• you need certified or guaranteed security - the scanner is explicitly best-effort only
• you want to scan general-purpose codebases rather than agent skill packages
• you need runtime protection of a live agent rather than pre-deployment scanning

Facets

cli-tool · maturity active

security vulnerability-scanning static-site-generator cli llm-inference developer-tools security artificial-intelligence developer-tools python cli cross-platform agent-skills prompt-injection yara sarif static-analysis llm-as-a-judge dataflow-analysis pre-commit ci-cd supply-chain-security ai-agents command-line

Member repositories

For agents

markdown · JSON · MCP: product_card(name="cisco-ai-defense/skill-scanner")