Works with the AI tools you already use

    CClaude CodeCCursorCCodex CLIGGitHub CopilotGGemini CLIVVS CodeWWindsurfMManus+14 more

    Skill Hardening Certifier

    2

    A rule-based security scanner and auto-hardener for AI agent skills to detect injections and unsafe code.

    $7

    30-day refund guarantee

    Secure checkout via Stripe

    0 installsSecurity scanned

    See it in action

    You say

    Audit the 'file-transfer-skill' folder for security risks and generate a hardened version.

    Your agent does

    Scan complete. Found 1 HIGH (shell execution) and 2 MEDIUM (unvalidated URL fetch) risks. Hardened copy created in /dist/hardened-file-transfer. Summary:

    • Fixed: Raw curl pipe to bash.
    • Flagged: Potential SSRF in fetch_meta.py (added TODO).
    • Certificate: generated high-risk-residual.md.

    What you get

    Detect prompt injection and safety-override instructions in MD filesIdentify and fix secret exfiltration risks in Python and JS helpersAudit skills for SSRF vulnerabilities and unguarded shell commandsGenerate a security certificate and residual risk report for a skill

    About this skill

    Security Auditing for AI Agent Skills

    The Skill Hardening Certifier is a specialized security tool designed for developers and platform operators who need to audit AI agent skills. As the ecosystem for agentic tools grows, so does the risk of prompt injection, data exfiltration, and unsafe code execution. Providing a simple prompt to an LLM isn't enough to catch subtle security flaws; you need a structured, rule-based scanning engine.

    What it does

    This skill performs a multi-stage security analysis on target skill directories. It parses SKILL.md files and associated helper scripts (Python, JavaScript, Shell) to identify critical vulnerabilities. The process involves:

    • Automated Scanning: Detects prompt injection patterns, secret exfiltration, raw network calls, and unguarded shell execution.
    • Severity Scoring: Categorizes findings from LOW to CRITICAL with actionable remediation hints.
    • Automated Hardening: Generates a "hardened" version of the skill, applying mechanical fixes and inserting TODO flags where human judgment is required.
    • Certification: Produces a formal security report and certificate summarizing the residual risk.

    Why use this skill

    Unlike general-purpose security scanners, this tool is specifically tuned for the unique threat model of LLM skills, such as instructions that attempt to override host agent safety protocols or bypass user approval. It provides a repeatable, verifiable pipeline to ensure the skills you deploy—or buy—meet a baseline security standard.

    Built by Nex AI. More skills and info at nex-ai.be and slopsome.com.

    security
    static-analysis

    How to install

    Drop the file into your AI Agent. Works with Claude, Cursor, ChatGPT, and 20+ more.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill passes our trust checks below.

    Security scanned

    Passed our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    30-day refund

    Not a fit? Get your money back

    Trust & safety

    Security scanned

    Verified clean 17 days ago

    Listed1 month ago

    Frequently Asked Questions