skill-security-analyzer

Name: skill-security-analyzer
Availability: InStock
Author: alejfanjul

Identify security risks in Claude skills before deployment.

Updated Aug 23, 2026

Search Tags:#security #vulnerability #risk-assessment #analyze #claude-skills #prompt-injection #safe-deployment

Ready to run

npx skills add https://github.com/Alejfanjul/ai-brain --skill skill-security-analyzer-alejfanjul

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: skill-security-analyzer
Source: https://github.com/Alejfanjul/ai-brain/tree/main/sources/claude-meta-skills/skill-security-analyzer
Command: npx skills add https://github.com/Alejfanjul/ai-brain --skill skill-security-analyzer-alejfanjul

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured, repeatable security analysis workflow to identify risks, vulnerabilities, and safety issues in Claude skills before deployment.

Core Features & Use Cases

Framework for metadata validation, including presence of name and description in SKILL.md frontmatter
Systematic review of SKILL.md instructions for clarity, safety, and prompt-injection risks
Comprehensive bundle inspection of scripts, references, and assets to surface security concerns
Output generation of executive summary, findings with severity, and actionable security checklist

Quick Start

Provide the Claude skill package (including SKILL.md) for a security assessment.

Frequently Asked Questions about skill-security-analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I check a Claude skill for security risks before deployment?▼

You can identify security risks in Claude skills by validating frontmatter metadata, analyzing SKILL.md instructions for prompt-injection risks, and inspecting bundled scripts and assets against security patterns to generate an executive summary and actionable checklist.

What is a prompt-injection risk in Claude skills and how is it detected?▼

A prompt-injection risk in Claude skills is a safety vulnerability hidden within instructions. It is detected through systematic SKILL.md instruction analysis that reviews content clarity and flags potential prompt-injection threats before safe deployment.

How do I validate SKILL.md frontmatter metadata for Claude skills?▼

Validating SKILL.md frontmatter metadata involves checking for the required presence of the skill name and description. This preflight security analysis ensures required metadata is present before proceeding to instruction and bundle reviews.

What does a security bundle inspection cover for Claude skills?▼

A security bundle inspection for Claude skills covers a comprehensive review of bundled scripts, references, and assets. It surfaces security concerns by inspecting these bundled resources against established security patterns.

Can I use this security analyzer for skills without bundled resources?▼

Yes, this security analyzer works for skills without bundled resources by focusing the assessment on frontmatter validation and SKILL.md instruction analysis to identify safety issues and prompt-injection risks.

What is the best way to generate a security checklist for Claude skill deployment?▼

The best way to generate a security checklist for Claude skill deployment is running a structured security analysis that outputs executive summaries and findings with severity levels based on frontmatter, instruction, and bundle inspections.