Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add renky1025/agent-skills --skill skill-security-checkgit clone --depth 1 https://github.com/renky1025/agent-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/renky1025/agent-skills/skill-security-check)<a href="https://agentmods.dev/skills/renky1025/agent-skills/skill-security-check"><img src="https://agentmods.dev/badge/skills/renky1025/agent-skills/skill-security-check/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/renky1025/agent-skills/skill-security-check"><img src="https://agentmods.dev/badge/skills/renky1025/agent-skills/skill-security-check.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Tool Misuse · line 115 Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
- medium Privilege Escalation · line 115 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00127 | $0.03810 |
| Opus 5 | $0.00063 | $0.01905 |
| Sonnet 5 | $0.00025 | $0.00762 |
| Haiku 4.5 | $0.00013 | $0.00381 |
Grade A, and why
skill-security-check scanned grade A with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootlowPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- Shell: `sudo`, `chmod +x`, `chmod 777`, `chown` Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- Python: `requests`, `urllib`, `http.client`, `aiohttp`, `httpx` Runs shell commandslowCapability
Expected in a hook, worth knowing in a rule or an instructions file.
- JavaScript: `eval()`, `new Function()`, `child_process`, `vm.runInNewContext` How it starts
The opening of the file, as written. The whole thing — 339 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Skill 安装前安全检查 (Multi-Language)
此skill用于在skill安装前进行全面的安全检查,确保待安装的skill不会对系统造成安全威胁。
支持语言: JavaScript/TypeScript, Python, Rust, Java, Go, C/C++, Ruby, PHP, Shell, PowerShell, Perl
自动化工具（推荐入口）
本 skill 随附可执行实现，优先用工具扫描，再按需做人工研判：
scripts/security-check.js：开箱即用的 Node CLI。对目标 skill 目录做 11 项静态扫描并生成报告：node scripts/security-check.js <skill-path>src/：TypeScript 源码（npm install && npm run build编译至dist/，dist/默认被 .gitignore 忽略）。
下方「安全检查流程」即工具的检测逻辑；手动审查时可直接使用文末的 grep 模式。
scripts/security-report-*.md 为示例输出，仅作格式参考（其中引用的 skill 名仅为样例）。
何时使用
在以下情况下必须执行安全检查:
- 安装来自GitHub、npm、PyPI、Crates.io或其他源的第三方skill
- 安装社区贡献的skill
- 更新已安装的skill到新版本
- 对安全性有疑问时
安全检查流程
对于每个待检查的skill,按照以下清单逐项检查:
1. 数据外泄检查
检查目标: 确保skill不会将敏感数据传输到外部服务器
检测模式 (按语言):
- JavaScript:
fetch,axios,XMLHttpRequest,WebSocket - Python:
requests,urllib,http.client,aiohttp,httpx - Rust:
reqwest,hyper,ureq,curl - Java:
HttpClient,HttpURLConnection,OkHttp,Retrofit - Go:
http.Get,http.Post,net/http - Ruby:
Net::HTTP,open-uri,httparty,faraday - PHP:
curl_,file_get_contents,fsockopen
预期结果: ✅ 无 - 无外部服务器通信(除非是skill的核心功能且已明确声明)
2. 凭证访问检查
检查目标: 确保skill安全地访问凭证和敏感配置
检测模式 (按语言):
- JavaScript:
process.env,dotenv - Python:
os.environ,os.getenv - Rust:
std::env,dotenv - Java:
System.getenv,System.getProperty - Go:
os.Getenv,os.LookupEnv - Ruby:
ENV[],ENV. - PHP:
$_ENV,$_SERVER,getenv
预期结果: ✅ 安全 - 仅读取配置型环境变量
3. 文件系统越界检查
检查目标: 确保skill只在预期目录内操作文件
检测模式 (按语言):
- JavaScript:
fs.writeFile,fs.readFile,fs.copyFile - Python:
open,pathlib,shutil.copy,shutil.move - Rust:
File::create,File::open,fs::write,std::fs - Java:
FileWriter,FileReader,Files.write,Files.read - Go:
os.WriteFile,os.ReadFile,os.Open,os.Create - Ruby:
File.open,File.write,FileUtils - PHP:
file_put_contents,file_get_contents,fopen,fwrite
What ships with it
19 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- .gitignore 248 B
- docs/plans/2026-04-20-six-layer-security-upgrade.md 103 KB
- jest.config.js 404 B runs code
- package.json 552 B
- README.md 5.7 KB
- scripts/security-check.js 41 KB runs code
- scripts/security-check.test.js 2.4 KB runs code
- scripts/security-report-article-deconstructor.md 1.4 KB
- scripts/security-report-attention-daily.md 2.0 KB
- scripts/security-report-fengshuixue.md 1.4 KB
- scripts/security-report-infocard.md 2.0 KB
- scripts/security-report-translate-polisher.md 1.4 KB
- src/config/protected-files.ts 2.5 KB runs code
- src/config/risk-patterns.ts 4.9 KB runs code
- src/index.test.ts 99 B runs code
- src/index.ts 136 B runs code
- src/types/constants.ts 1.6 KB runs code
- src/types/index.ts 4.1 KB runs code
- tsconfig.json 508 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 339 lines · 127 tokens per session scan A f0d2352cef19
skill-security-check is a skill published in the GitHub repository renky1025/agent-skills (11 stars, last pushed today), licensed MIT. It adds 127 tokens to every session and 3,810 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 3 findings (asks for root, makes network calls, runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
design-taste-frontend
Anti-slop frontend skill for landing pages, portfolios, and redesigns. The agent reads the brief, infers the right design direction, and ships interfaces that do not look templated. Real design systems when applicable, audit-first on redesigns, strict pre-flight check.
stitch-design-taste
Semantic Design System Skill for Google Stitch. Generates agent-friendly DESIGN.md files that enforce premium, anti-generic UI standards — strict typography, calibrated color, asymmetric layouts, perpetual micro-motion, and hardware-accelerated performance.
full-output-enforcement
Overrides default LLM truncation behavior. Enforces complete code generation, bans placeholder patterns, and handles token-limit splits cleanly. Apply to any task requiring exhaustive, unabridged output.
image-to-code
Elite website image-to-code skill for Codex. For visually important web tasks, it must first generate the design image(s) itself, deeply analyze them, then implement the website to match them as closely as possible. In Codex, it must prefer large, readable, section-specific images instead of tiny compressed boards…
imagegen-frontend-mobile
Elite mobile app image-generation skill for creating premium, app-native screen concepts and flows. Designed for iOS, Android, and cross-platform mobile products. Prioritizes clean hierarchy, comfortably readable text, strong multi-screen consistency, controlled color palettes, non-generic creative direction, textured…
imagegen-frontend-web
Elite frontend image-direction skill for generating premium, conversion-aware website design references. CRITICAL OUTPUT RULE — generate ONE separate horizontal image FOR EVERY section. A landing page with 8 sections produces 8 images. Never compress multiple sections into one image. Enforces composition variety (not…