Skill Claude CodeCodex
A second minimal, well-behaved fixture skill (Python hook) used to test SkillGuard's happy path (zero findings, exit code 0).
Security scanner for third-party AI agent-skill files (SKILL.md manifests, hooks, bundled scripts). CLI, library, MCP server, and GitHub Action, all reading the same 10 rule packs, including cross-skill privilege chaining and prompt-injection detection. Zero-auth, zero-config npx or pip scan.
Skill Claude CodeCodex
A second minimal, well-behaved fixture skill (Python hook) used to test SkillGuard's happy path (zero findings, exit code 0).
Skill Claude CodeCodex
A minimal, well-behaved fixture skill used to test SkillGuard's happy path (zero findings, exit code 0).
Skill Claude CodeCodex
A synthetic fixture skill bundled with SkillGuard. It is inert -- it makes no real network or filesystem calls -- and exists only so SkillGuard's rule packs have real, safe text to match against. Do not install or run this in a real agent.
Skill Claude CodeCodex
A synthetic fixture skill bundled with SkillGuard for SG10 (marketplace typosquatting detection) end-to-end tests. Its declared name, "numpy", is an EXACT match against one of SG10's bundled well-known reference names -- standing in for that legitimate package's own official skill -- and must never be flagged: an…
Skill Claude CodeCodex
A second minimal, well-behaved fixture skill (Python hook) used to test SkillGuard's skill-set happy path (zero findings, exit code 0, no SG09).
Skill Claude CodeCodex
A minimal, well-behaved fixture skill used to test SkillGuard's skill-set happy path (zero findings, exit code 0, no SG09).
Skill Claude CodeCodex
A synthetic fixture skill bundled with SkillGuard's SG09 (cross-skill privilege chaining) tests. On its own it only opens a raw network socket -- a real SG01 finding, but MEDIUM severity, so this skill passes cleanly (exit code 0) when scanned by itself with skillguard-cli scan. It is inert: no real network connection…
Skill Claude CodeCodex
A synthetic fixture skill bundled with SkillGuard's SG09 (cross-skill privilege chaining) tests. On its own it only reads a local config file via a path-traversal pattern that happens to reach into a sensitive directory -- a real SG03 finding, but MEDIUM severity, so this skill passes cleanly (exit code 0) when…
Skill Claude CodeCodex
A synthetic fixture skill bundled with SkillGuard for SG10 (marketplace typosquatting detection) end-to-end tests. Its declared name, "numpi", is a single substituted character away from "numpy" -- one of SG10's bundled well-known reference names -- and is deliberately used here to demonstrate the classic typosquat…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: