analyse

Parse Claude Code skills and report security risks with remediation guidance.

Updated Apr 7, 2026

Search Tags:#automation #security #reporting #claude-code #analyze #risk-analysis

Ready to run

npx skills add https://github.com/yonglunyao/skill-analyse-plugin --skill analyse-yonglunyao

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: analyse
Source: https://github.com/yonglunyao/skill-analyse-plugin/tree/main/skills/analyse
Command: npx skills add https://github.com/yonglunyao/skill-analyse-plugin --skill analyse-yonglunyao

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Analyzes one or more Claude Code skills for potential security issues including prompt injection, command execution risks, data exfiltration, privilege escalation, and obfuscation.

Core Features & Use Cases

Parses the input skills into a unified, machine-readable format.
Checks each skill against 20+ security rules across 6 categories.
Analyzes findings using LLM semantic analysis.
Generates terminal report, Markdown report, and CSV data for filtering and sorting.
Use Case: Security teams can batch-analyze multiple skills to identify high-risk items and prepare remediation guidance.

Quick Start

Provide a path to a skill file, directory, ZIP archive, or batch directory to start analysis.

Frequently Asked Questions about analyse

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan Claude Code skills for prompt injection and command execution risks?▼

To scan Claude Code skills for prompt injection and command execution risks, provide a skill file path, directory, or ZIP archive. The analysis applies over twenty security rules across six categories and returns structured risk levels with remediation guidance.

Can I batch analyze multiple Claude Code skills for security vulnerabilities?▼

You can batch analyze multiple Claude Code skills by providing a batch directory path. The tool parses inputs into a unified format, checks against security rules, and applies LLM semantic analysis to identify data exfiltration, privilege escalation, and obfuscation risks.

What report formats are generated when analyzing Claude Code skill security?▼

Analyzing Claude Code skill security generates a terminal summary, a Markdown report, and a CSV data table. The CSV output supports filtering and sorting to help security teams identify high-risk items and prepare remediation guidance.

How to check a ZIP archive of Claude Code skills for data exfiltration and obfuscation?▼

To check a ZIP archive of Claude Code skills for data exfiltration and obfuscation, pass the archive path as input. The tool parses the archive, applies its rule set across six security categories, and outputs structured risk levels with remediation guidance.

Does Claude Code skill security analysis require any external dependencies?▼

Claude Code skill security analysis requires no external dependencies. It operates independently to parse inputs and apply its rule set, generating terminal, Markdown, and CSV reports without needing additional environment setup.

What is the best way to automate risk analysis reporting for Claude Code skills?▼

The best way to automate risk analysis reporting for Claude Code skills is to input batch directories for continuous scanning. The tool automatically outputs terminal summaries, Markdown reports, and CSV data tables with structured risk levels and remediation guidance.