arrow_backAI Skill ShieldpublicDefault-branch GitHub scan
Trust report
RudrenduPaul/skillguard
Security scanner for third-party AI agent-skill files (SKILL.md manifests, hooks, bundled scripts). CLI, library, MCP server, and GitHub Action, all reading the same 10 rule packs, including cross-skill privilege chaining and prompt-injection detection. Zero-auth, zero-config npx or pip scan.
View scanned commit on GitHubopen_in_new0%Static score
86% score14% score gap
Highest finding: Medium severityLatest scan
medium severity
Static analysis score
Install decision
Do Not Install
Automatic execution surfaces were detected with critical or compounding risk. Hold installation until a reviewer clears the repo.
Scan identity
- Scanned
- 2026-08-09
- Commit
- 477d2b02c15e
- License
- Apache-2.0
- Repository
- Active
Repository scan summary
- policyFindings
- 116
- terminalInstall surface
- 3
- Repository reach
- 1
Validation findings detected
Execution paths reviewed
GitHub stars
Highest-priority findings
The latest default-branch scan, ordered by severity.
- mediumNo usage examplesexamples/clean-skill-python/SKILL.md
- mediumNo agent compatibility detectedexamples/clean-skill-python/SKILL.md
- mediumNo usage examplesexamples/clean-skill/SKILL.md
- mediumNo agent compatibility detectedexamples/clean-skill/SKILL.md
- mediumNo agent compatibility detectedexamples/known-bad-skill/SKILL.md
Share this trust result
The badge stays linked to the latest default-branch scan for this skill path.
Do you consider this skill safe to use?
Community signals help prioritize human review; they do not change the scan verdict.
AI Skill Shield is an automated pre-install review, not a guarantee of safety. Confirm sensitive permissions and execution paths before installation.