🛡️ Skill Injection Scanner

Protect Your Agent from Malicious Skills

As the AI agent ecosystem grows, "Skill Injection" is becoming a critical threat. This skill acts as a specialized security auditor for your AI agent's package library. It scans SKILL.md files and associated package content to identify hidden risks before you integrate them into your workflow.

What it does

• Prompt Injection Detection: Flags instructions designed to hijack the agent's system prompt or ignore previous constraints.
• Data Exfiltration Scanning: Identifies suspicious wording or patterns aimed at offloading secrets, environment variables, or private data to external endpoints.
• Command Safety Audit: Detects unsafe shell command references, obfuscated scripts, and remote instruction fetches.
• Resource Perimeter Checks: Alerts you to overbroad capability requests that exceed the necessary scope of the skill.

Why use this skill?

Standard LLMs often follow instructions blindly, even if those instructions are malicious. Manually auditing every skill package is time-consuming and error-prone. This tool uses specialized heuristics and a dedicated security checklist to provide a structured, severity-rated report. It ensures you know exactly what a skill is capable of before you grant it access to your filesystem or API keys.

Supported Formats

Primarily optimized for SKILL.md packages, YAML configurations, and associated Python/Shell utility scripts within an agent's capability directory.