Assess third-party skills, agents, or plugins for security vulnerabilities.
npx skills add https://github.com/ievo-ai/skills --skill security-check-ievo-ai
Please help me install this Agent Skill. Skill: security-check Source: https://github.com/ievo-ai/skills/tree/main/plugins/ievo/skills/security-check Command: npx skills add https://github.com/ievo-ai/skills --skill security-check-ievo-ai
This Skill ensures the safety of third-party skills, agents, or plugins before installation by conducting a thorough vulnerability assessment by a senior application security engineer.
Run the security-check skill with the following command: /ievo:security-check <candidate> <type>
High-intent search queries and answers about installing and using this skill.
Run a vulnerability assessment on third-party skills by executing the security-check command with the candidate name and type. It clones the candidate via git, inspects all files and dependencies, and outputs a structured security verdict with cited evidence.
A deep content code review detects prompt injection, credential exfiltration, and supply-chain compromise threats. It examines the full content of every file, including dependencies, to ensure no malicious code is present before providing a structured safety verdict.
Yes, you need gh CLI and git installed to perform a security scan on agents. The gh CLI retrieves API metadata, git clones the candidate repository for local file reads, and WebFetch pulls additional audit signals during the vulnerability assessment.
The best way to check application security and prevent prompt injection is using an automated vulnerability assessment. It audits new skills by examining code and metadata, catching injection attempts, and providing remediation suggestions with a clear safety verdict.
The threat detection verdict indicates code safety levels: GREEN means safe, YELLOW flags potential issues requiring review, and RED identifies critical security vulnerabilities. The structured report includes cited evidence and alternative suggestions if necessary.
Tommy-ywManage GitHub repositories by cloning, creating, forking, and configuring via gh CLI or git with REST API.
tonone-aiAudit IaC and cloud configurations for security, cost, and reliability gaps.
viraatdasIdentify and remediate security risks across infrastructure, supply chain, and code.
amano--Intercept HTTP traffic and test web applications for security vulnerabilities.
