← all repositories

cisco-ai-defense/skill-scanner

Security scanner that detects prompt injection and malicious code patterns in AI agent skills using LLM-as-a-judge and behavioral analysis.

2.1k stars Python Coding AssistantsLLMOps · Eval
skill-scanner
Velocity · 7d
+16
★ / day
Trend
steady
star history

This is a security scanner designed to analyze AI agent skills (OpenAI Codex Skills, Cursor Agent Skills) for threats including prompt injection, data exfiltration, and malicious code. It combines pattern-based detection using YAML and YARA rules with LLM-as-a-judge evaluation and behavioral dataflow analysis to identify potential security issues. The tool scans agent skill definitions and associated code to flag suspicious patterns and help developers harden their AI agent implementations.

heatdrop uses Google Analytics to see which pages get read — nothing else. Your call. How we handle data.