Static security scanner for agent skills
rrrrrredy/skill-security-guard · skills
Static security scanner for agent skills: A-F risk rating, safe zip scanning, CI-tested rules.
★ 2GitHub stars
0Forks
2026-09-01Last updated
PythonLanguage
MITLicense
Key features
- Sensitive file reads and data exfiltration patterns
- SKILL.md or any local text/code file
- B: advisory-only or light findings
- Compliance red lines such as tunneling, restricted-system access, highly sensitive data handling, and sensitive config backup/upload
- Malicious script patterns in scripts/
Requirements
- The scanner CI job tests Python 3.11 and 3.12 on Ubuntu.
- The DeepSeek Harness Bundle job tests Node.js 22.19 and 24 on both Ubuntu and Windows with Python 3.11.
Install command
dsh plugin --profile web add github:rrrrrredy/skill-security-guard