aeon-skill-security-scan

To audit installed skills for shell injection and secret exfiltration, run a security scan targeting the specific skill. This process examines SKILL.md files and companion scripts to identify and report common security threats.

Obfuscation detection in skill security scanning is the process of analyzing installed skill scripts to identify hidden or masked malicious code. It helps security-conscious environments uncover disguised threats during a comprehensive security audit.

Yes, the security scanning integrates directly with Bankr safety scoring. This integration enhances the overall security assessment by combining custom vulnerability findings with Bankr's established safety metrics.

You trigger a security scan using natural language custom commands such as "audit this skill" or "check skill X for injection". Alternatively, you can execute a direct command to initiate the audit process.

A key limitation is that scans return no output when there are no new or resolved findings, operating as a no-op run. The audit specifically targets SKILL.md and companion scripts for common threats rather than deep runtime analysis.