skillguard

Detect credential theft and other security risks in AI skill definitions before installation.

Updated Mar 15, 2026

Search Tags:#security #vulnerability #risk-assessment #ai-skills #skill-scan #pre-install

Ready to run

npx skills add https://github.com/JNZader/javi-ai --skill skillguard-jnzader

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: skillguard
Source: https://github.com/JNZader/javi-ai/tree/main/own/skills/skillguard
Command: npx skills add https://github.com/JNZader/javi-ai --skill skillguard-jnzader

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Credential-aware pre-install reviews for AI skills to prevent credential leakage, code execution risks, data exfiltration, and scope escape before installation.

Core Features & Use Cases

Static analysis of credentials patterns, network calls, and self-modification.
Automated pre-install review during skill installation workflows (javi-ai install and javi-forge plugin add).
Auditable risk reports with remediation guidance.

Quick Start

Run SkillGuard on the target skill to generate a safety report prior to installation.

Frequently Asked Questions about skillguard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a pre-install security scan on an AI skill?▼

To run a pre-install security scan, execute the scanner on the target AI skill definition to generate an auditable risk report with remediation guidance prior to installation.

What is static analysis for AI skill vulnerability assessment?▼

Static analysis for AI skill vulnerability assessment is the process of detecting credential theft, code injection, data exfiltration, and scope escape by enforcing heuristic checks on skill definitions before installation.

Can I automate security checks during skill installation workflows?▼

Yes, you can automate pre-install security checks during skill installation workflows to intercept malicious patterns, network access attempts, and self-modification routines before the skill is added to your environment.

What types of credential leakage risks does pre-install skill vetting detect?▼

Pre-install skill vetting detects credential leakage risks by applying static and heuristic checks to identify credential patterns, network calls, and self-modification within AI skill definitions.

Does pre-install security scanning generate a report for third-party skill vetting?▼

Yes, pre-install security scanning generates an auditable risk report with remediation guidance, providing a safety assessment for third-party skill vetting and credential-aware reviews.

What are the limitations of heuristic checks for AI skill scope escape detection?▼

Heuristic checks for AI skill scope escape detection are limited to static pattern analysis and known network access routines, meaning they enforce pre-install safety but may not catch novel obfuscation techniques.