Scan Claude Code skill scripts for malicious patterns using AST-based detectors.
npx skills add https://github.com/akira82-ai/skill --skill security-scanner-akira82-ai
Please help me install this Agent Skill. Skill: security-scanner Source: https://github.com/akira82-ai/skill/tree/main/security-scanner Command: npx skills add https://github.com/akira82-ai/skill --skill security-scanner-akira82-ai
Claude Code 自定义 skills 的安全风险常常被忽视。本 Skill 提供一个静态分析工具，用以发现潜在恶意代码、数据外泄与混淆行为，帮助开发者在发布前进行安全评估。
Run the scanner to analyze all Claude Code skills and generate a risk report.
High-intent search queries and answers about installing and using this skill.
Detect data exfiltration in Claude Code skills using AST-based detectors that target network operations and obfuscation patterns within the skill scripts, producing a severity-ranked risk report for quick identification.
Static analysis identifies security risks in Claude Code skills by using AST-based detectors to scan code for dangerous calls, network operations, file access, obfuscation, and data exfiltration, generating a structured report with severity levels.
Static analysis evaluates code by parsing the AST of scripts within the skills directory to find dangerous calls and data exfiltration patterns, outputting a structured risk report that highlights security vulnerabilities before publication.
The security scanner requires the rich dependency, version 13.7.0 or higher, to format and display the structured risk reports detailing malicious patterns and severity levels found in the scripts.
GGEduGuide installation of skills and rules into user-level or project-level directories.
oalansilvaScan code, dependencies, and configurations for security vulnerabilities and generate a JSON report.
taewook486Perform AST-based structural code search, security scanning, and refactoring across multiple languages.
christopherlouetDetect code smells and generate refactoring suggestions for JavaScript files.
