skills.rest
swannysec
swannysecCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

safe-skill-install

Automates Git-based skill acquisition with static and behavioral scanning before installation.

2|Updated Jan 24, 2026
Search Tags:#security#Claude Code#supply-chain#skill-scanner#safe-installation#archive-download#prereqs
One-click install
npx skills add https://github.com/swannysec/robot-tools --skill safe-skill-install
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: safe-skill-install
Source: https://github.com/swannysec/robot-tools/tree/main/workflow-toolkit/skills/safe-skill-install
Command: npx skills add https://github.com/swannysec/robot-tools --skill safe-skill-install

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires skill-scanner, gh, curl, git, jq, python3, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This skill enforces a deterministic security gate around Claude Code skill installations, preventing risky tooling from being installed without verification.

Core Features & Use Cases

  • Wraps Cisco's skill-scanner to vet skills before installation.
  • Performs prereq checks, source resolution, and a full static + behavioral scan, followed by an auditable installation path.
  • Use cases include installing from GitHub, marketplaces, or local paths with post-install verification and rollback if integrity fails.

Quick Start

Run safe-skill-install to scan a remote skill: e.g. "scan skill at https://github.com/owner/repo" using manual mode, then proceed to install only after review.

Frequently Asked Questions about safe-skill-install

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify Claude Code skills for supply-chain security before installing them?▼

To verify Claude Code skills for supply-chain security, you can use a deterministic security gate that wraps the Cisco skill-scanner to perform static and behavioral analysis before permitting installation. This enforces archive-based downloads or hardened clones from GitHub, marketplaces, or local paths.

What prerequisites do I need to run safe-skill-install for scanning skill repositories?▼

To run safe-skill-install for scanning skill repositories, you need the Cisco skill-scanner, Git 2.45.1 or higher, the safe-skill-install wrapper, and command-line dependencies including gh, curl, jq, and python3 to drive the workflow.

Can I scan and install a skill from a local path using a security gate?▼

Yes, you can scan and install a skill from a local path using this security gate, which supports source resolution for local directories alongside remote GitHub repositories and marketplaces, conducting full static and behavioral scans before installation.

What happens if a skill fails an integrity check during a secure installation?▼

If a skill fails an integrity check during a secure installation, the workflow supports an auditable installation path that includes rollback capabilities, ensuring risky tooling is not installed without verification and reverting changes if integrity fails.

Does safe-skill-install work with GitHub repositories and marketplaces for skill downloads?▼

Yes, safe-skill-install works with GitHub repositories and marketplaces for skill downloads by performing archive-based downloads or hardened clones, then conducting prerequisite checks and source resolution before vetting the skill.

Related Skills

Explore More Software Engineering Skills→
InterWorksInterWorks
3

dev-setup

Verify and configure Git, GitHub, Node.js, Python, and Claude Code prerequisites on Windows and macOS.

Official
Advanced
MBarry01MBarry01

configure-ecc

Automate guided installation and configuration of Everything Claude Code for Claude Code deployments.

Community
Advanced
alffeialffei
69

skill-installer

Install and manage external skills from curated catalogs or GitHub repositories.

Community
Intermediate
trypanictrypanic

go-code-quality-check

Run go vet, staticcheck, and semgrep to generate severity-grouped fix plans.

Community
Advanced