skill-scanner 开源项目推荐（33 个）

Tencent /AI-Infra-Guard

全栈 AI 红队测试平台，通过 Agent Scan、Skills Scan、MCP 扫描、AI Infra 扫描和 LLM 越狱评估来保障 AI 生态安全。

berabuddies /Semia

Semia, security audit for AI agent skills.

PrismorSec /prismor

Self-hosted runtime control plane for AI agents. Observe or HITL approve or Block rogue tool calls before it executes: secret leaks, prompt injection, supply chain etc in a local dashboard. Agent agnostic (Claude, codex, langchain etc.)

openclaw /clawscan

Composable security scanning harness for agent skills

HuTa0kj /vetix

Vetix — 基于Golang的自动扫描、识别和评估SKILL安全风险。

EvolutionUnleashed /skill-sentinel

AI Agent Skill Security Scanner — Detects malicious code, prompt injection, data exfiltration, and supply chain threats in SKILL.md files. Built by Evolution Unleashed.

bawbel /scanner

Open-source CLI scanner for agentic AI components such as skills, MCP servers, system prompts

NMitchem /SkillScan

Security scanner for AI agent SKILL.md files. Static analysis, LLM behavioral prediction, and Docker Sandbox execution.

kurtpayne /skillscan-security

Security scanner for AI agent skills and MCP tool bundles — prompt injection, IOC matching, malware detection, ML classifier

Fausto-404 /skill-evasion-lab

面向 Agent Skills 安全研究的检测绕过实验仓库，用于验证恶意 Skill 在静态扫描、语义分析与运行时执行之间可能存在的检测盲区。

syedabbast /skill-scanner

Static security scanner for SKILL.md files and AI agent skill packages. 25+ detection rules across 5 categories. Zero dependencies, CI/CD ready.

Frank-Masciopinto /ironheights

Ironheights: The Immune System for AI Agents. Protects any AI bot that installs it: scans agent skills (OpenClaw, Claude, Grok Bot, Codex, Cursor, MCP) A-F, threat-model PR checks, MCP server, drift guard, posture report. Local, no telemetry.

skilltrust /skill-detector

CLI to spot risky AI skill packages before you use them. Scans for injection, exfiltration, supply chain, and other threats.

albertdobmeyer /opentrapp

A safer way to run autonomous CLI agents on your own computer. Open-source, MIT, community-driven.

Caelguard /caelguard-community

Free agent security tools for OpenClaw -- ShellGuard Scanner + Token Audit

opentrapp /skill-firewall

Scan agent skills and plugins for malware and prompt injection before an agent loads them. Offline GitHub Action and CLI. The published projection of OpenTrApp's Skill Firewall.

kledidoda /skill-evolution

Enable AI agents to autonomously create, evaluate, and evolve skills across any marketplace without user intervention.

stillnotadam /Husk

Static security scanner for AI agent skills. Built against the bypass techniques that beat Snyk, Cisco & Vercel scanners. Offline, deterministic, zero dependencies, CI-ready. Benchmarked on 11, 225 real malicious skills.

JUTZUGC /skillspector-deploy-guide

SkillSpector 一键部署｜装技能前先扫一遍，查提示注入、偷数据、供应链风险｜自动建环境装好命令行｜第三方一键部署方案

wlzywang /skill-tsa

Safety scanner for Claude Code SKILL.md files, scripts, templates, and references.