RudrenduPaul/skillguard

Security scanner for third-party AI agent-skill files (SKILL.md manifests, hooks, bundled scripts). CLI, library, MCP server, and GitHub Action, all reading the same 10 rule packs, including cross-skill privilege chaining and prompt-injection detection. Zero-auth, zero-config npx or pip scan.

1Stars on the repository
10Mods indexed here, across every type
8d agoLast push, which is what freshness is scored on
Apache-2.0Licence, which decides whether bodies are shown

clean-skill-python

01

RudrenduPaul/skillguard

Skill Claude CodeCodex

A second minimal, well-behaved fixture skill (Python hook) used to test SkillGuard's happy path (zero findings, exit code 0).

1 8d ago A 36 tokens original Apache-2.0

clean-skill

02

RudrenduPaul/skillguard

Skill Claude CodeCodex

A minimal, well-behaved fixture skill used to test SkillGuard's happy path (zero findings, exit code 0).

1 8d ago A 30 tokens original Apache-2.0

known-bad-skill

03

RudrenduPaul/skillguard

Skill Claude CodeCodex

A synthetic fixture skill bundled with SkillGuard. It is inert -- it makes no real network or filesystem calls -- and exists only so SkillGuard's rule packs have real, safe text to match against. Do not install or run this in a real agent.

1 8d ago A 57 tokens original Apache-2.0

numpy

04

RudrenduPaul/skillguard

Skill Claude CodeCodex

A synthetic fixture skill bundled with SkillGuard for SG10 (marketplace typosquatting detection) end-to-end tests. Its declared name, "numpy", is an EXACT match against one of SG10's bundled well-known reference names -- standing in for that legitimate package's own official skill -- and must never be flagged: an…

1 8d ago A 109 tokens original Apache-2.0

formatter

05

RudrenduPaul/skillguard

Skill Claude CodeCodex

A second minimal, well-behaved fixture skill (Python hook) used to test SkillGuard's skill-set happy path (zero findings, exit code 0, no SG09).

1 8d ago A 39 tokens original Apache-2.0

greeter

06

RudrenduPaul/skillguard

Skill Claude CodeCodex

A minimal, well-behaved fixture skill used to test SkillGuard's skill-set happy path (zero findings, exit code 0, no SG09).

1 8d ago A 35 tokens original Apache-2.0

report-uploader

07

RudrenduPaul/skillguard

Skill Claude CodeCodex

A synthetic fixture skill bundled with SkillGuard's SG09 (cross-skill privilege chaining) tests. On its own it only opens a raw network socket -- a real SG01 finding, but MEDIUM severity, so this skill passes cleanly (exit code 0) when scanned by itself with skillguard-cli scan. It is inert: no real network connection…

1 8d ago A 92 tokens original Apache-2.0

vault-reader

08

RudrenduPaul/skillguard

Skill Claude CodeCodex

A synthetic fixture skill bundled with SkillGuard's SG09 (cross-skill privilege chaining) tests. On its own it only reads a local config file via a path-traversal pattern that happens to reach into a sensitive directory -- a real SG03 finding, but MEDIUM severity, so this skill passes cleanly (exit code 0) when…

1 8d ago A 105 tokens original Apache-2.0

numpi

09

RudrenduPaul/skillguard

Skill Claude CodeCodex

A synthetic fixture skill bundled with SkillGuard for SG10 (marketplace typosquatting detection) end-to-end tests. Its declared name, "numpi", is a single substituted character away from "numpy" -- one of SG10's bundled well-known reference names -- and is deliberately used here to demonstrate the classic typosquat…

1 8d ago A 85 tokens original Apache-2.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: