skills.rest
nyanko3141592
nyanko3141592COMMUNITY
Explore all skills by this author →
Website𝕏@nya3_neko2GitHub

Skill Check - Agent Skill Security Analyzer

Analyze Agent Skill repositories for security vulnerabilities and risk levels.

1|Updated Jan 24, 2026
Search Tags:#code review#security#agent skills#risk assessment#vulnerability scanning#skill analysis
One-click install
npx skills add https://github.com/nyanko3141592/skill-check-skill --skill skill-check-agent-skill-security-analyzer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Skill Check - Agent Skill Security Analyzer
Source: https://github.com/nyanko3141592/skill-check-skill/tree/main
Command: npx skills add https://github.com/nyanko3141592/skill-check-skill --skill skill-check-agent-skill-security-analyzer

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill addresses the critical security risks associated with installing third-party Agent Skills by providing a thorough analysis of their code and behavior before deployment.

Core Features & Use Cases

  • Automated Security Scanning: Analyzes skill definitions and associated files for malicious patterns, data exfiltration, and prompt injection vulnerabilities.
  • Risk Assessment: Categorizes identified risks into Critical, High, and Medium levels, providing clear recommendations.
  • Use Case: Before installing a new skill from an unknown developer, use this Skill to scan its repository for any hidden threats, ensuring the safety of your environment and data.

Quick Start

Analyze the security of the skill located at the GitHub repository user/suspicious-skill.

Frequently Asked Questions about Skill Check - Agent Skill Security Analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan an Agent Skill repository for security vulnerabilities before installation?▼

You can analyze Agent Skill repositories for security vulnerabilities by scanning skill definition files and associated scripts to identify malicious code execution, data exfiltration, and prompt injection threats.

What types of security risks are identified during an Agent Skill code review?▼

A security code review identifies Critical, High, and Medium risks, detecting malicious code execution, data exfiltration, and prompt injection vulnerabilities with detailed explanations and recommendations.

How does vulnerability scanning work for third-party Agent Skills?▼

Vulnerability scanning works by retrieving repository content using GitHub CLI to analyze skill definitions and associated scripts, categorizing identified risks into Critical, High, and Medium levels.

Can I analyze GitHub repositories to detect prompt injection in Agent Skills?▼

Yes, you can detect prompt injection in Agent Skills by analyzing GitHub repositories, scanning for malicious patterns and vulnerabilities before deploying the skill to your environment.

Do I need GitHub CLI to perform a risk assessment on Agent Skills?▼

Yes, GitHub CLI is required for repository content retrieval when performing a risk assessment on Agent Skills, enabling the scanner to access and analyze skill definition files and associated scripts.

Related Skills

Explore More Software Engineering Skills→
tneztnez
3

skill-installer

Install agent skills from GitHub repositories into the local environment.

Community
Basic
LawrenceHwangLawrenceHwang

security-review

Identify security vulnerabilities in codebases and generate patch recommendations.

Community
Advanced
htafollahtafolla
5

security-scan

Scan codebases for security vulnerabilities and generate assessment reports.

Community
Intermediate
ToanPV90ToanPV90

sast-scanning

Detects source code vulnerabilities via static analysis with JSON/SARIF outputs.

Community
Advanced