aeon-skill-security-scan

Scan SKILL.md files and scripts for shell injection and secret exfiltration.

Updated Jun 11, 2026
One-click install
npx skills add https://github.com/dnzengou/agentbot-opensource --skill aeon-skill-security-scan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aeon-skill-security-scan
Source: https://github.com/dnzengou/agentbot-opensource/tree/main/skills/aeon-skill-security-scan
Command: npx skills add https://github.com/dnzengou/agentbot-opensource --skill aeon-skill-security-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill audits installed Bankr skills for potential security vulnerabilities, such as shell injection, secret exfiltration, and destructive commands, before they are run.

Core Features & Use Cases

  • Security Audit: Scans SKILL.md files and companion scripts for vulnerabilities.
  • Customizable: Integrates with Bankr Safety Scores and can be configured for silent or detailed scans.
  • Use Case: Before deploying a new skill, use this tool to scan it for security risks and ensure it's safe to run.

Quick Start

Run the aeon-skill-security-scan skill to scan all installed skills for potential security issues.

Frequently Asked Questions about aeon-skill-security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan installed skills for shell injection or secret exfiltration vulnerabilities?

Scanning installed Bankr skills for shell injection involves auditing SKILL.md files and scripts for destructive commands and secret exfiltration patterns using automated vulnerability scanning before activation.

What is skill auditing and how does it prevent destructive commands from running?

Skill auditing prevents destructive commands by scanning SKILL.md files and companion scripts for known vulnerability patterns, blocking unsafe skills from executing and integrating with Bankr Safety Scores for assessment.

Can I configure vulnerability scanning to run silently without detailed output?

Vulnerability scanning supports both silent and detailed configurations, enabling customized security audit outputs when scanning installed Bankr skills for potential security vulnerabilities and destructive commands.

Do I need Bankr Safety Scores integration to perform a security audit on skills?

Bankr Safety Scores integration is optional but enhances security assessment by providing enriched safety scoring alongside the standard vulnerability scanning of SKILL.md files and scripts for shell injection.

When should I run a security audit on my installed Bankr skills?

Run a security audit before deploying or activating a new Bankr skill to ensure it is safe from vulnerabilities like shell injection, secret exfiltration, and destructive commands, preventing potential security breaches.

Limitations of automated vulnerability scanning for AI safety and skill auditing?

Limitations of automated vulnerability scanning include reliance on known pattern matching for shell injection and secret exfiltration, meaning novel or obfuscated destructive commands in scripts might evade detection during skill auditing.