pezhik/skilltotal

Claude Code plugin that scans a package before the agent runs npx, npm install, pip install, uvx or claude mcp add. Malicious indicators block the install. High-risk packages need your approval. The scan runs on your machine and never executes the code or calls an LLM. Every finding cites a file and line. Also a CLI, GitHub Action and MCP server.

13Stars on the repository

4Mods indexed here, across every type

yesterdayLast push, which is what freshness is scored on

Apache-2.0Licence, which decides whether bodies are shown

Sort Relevance Recently updated Fewest tokens Security grade Repo stars Stars this week Top rated 1 mods

skilltotal

pezhik/skilltotal

MCP server Claude CodeCodexCursor +2

AI Component Security Platform — static security analysis for AI components (CLI engine). Runs locally from the skilltotal Python package.

not rated 13 +2 yesterday A tokens not measured original Apache-2.0