Publish Skill

SKILL.md

---
name: skillscan-wrapper
description: Security audit tool for AI agent skills. Scans skill packages for malware, credential theft, and suspicious patterns before installation. Defensive security tool with optional enterprise reporting (user-controlled destination).
license: MIT-0
metadata:
  author: cyzlmh
  tags:
    - security
    - scanner
    - audit
    - skill-security
    - malware-detection
  triggers:
    - "scan this skill"
    - "audit skill before install"
    - "check skill security"
    - "review skill package"
  permissions:
    network: "optional - only for enterprise reporting (--upload-url) or external scanner (--engine external), both user-controlled"
    files_read: "skill directories being scanned, no user credentials or identity files"
    files_write: "optional output directory (--output-dir), user-specified only"
---

# Skill Scan Wrapper

**DEFENSIVE SECURITY TOOL** - Use this skill to audit other skills before installation.

When you need to scan a skill package, archive, or release bundle for security risks, use this tool. It helps detect malicious patterns like credential theft, data exfiltration, and code injection before you install unknown skills.

## Security Guarantees

This tool **DOES NOT**:
- Read your credentials, SSH keys, AWS configs, or any identity files
- Access MEMORY.md, USER.md, SOUL.md, or agent identity files
- Send data anywhere without your explicit command
- Modify system files outside your specified workspace
- Request elevated/sudo permissions

This tool **ONLY**:
- Reads skill files you explicitly ask it to scan
- Writes reports to directories you explicitly specify
- Optionally sends reports to URLs you explicitly provide (enterprise integration)
- Uses SHA-256 checksums to verify binary integrity

## Source Transparency

This tool includes a compiled Rust binary. Source code is available at:
- Gitee: https://gitee.com/random_player/cmic-skill-scanner
- All releases include SHA-256 checksums for integrity verification
- Build from source: `cargo build --release` (see repo README)

## 功能

- 内置 Rust 原生引擎，无需外部依赖即可运行
- 可选桥接 Cisco Skill Scanner (external engine) 获更强检测能力
- 支持单 skill 和批量目录扫描
- 输出风险评级与发现项摘要

## 下载

从以下地址下载对应平台的二进制包：

| 平台 | 下载地址 |
|------|----------|
| macOS ARM64 | https://gitee.com/random_player/cmic-skill-scanner/releases/download/v0.4.0/skillscan-wrapper-darwin-arm64-v0.4.0.zip |
| Linux x64 | https://gitee.com/random_player/cmic-skill-scanner/releases/download/v0.4.0/skillscan-wrapper-linux-amd64-v0.4.0.zip |
| Linux ARM64 | https://gitee.com/random_player/cmic-skill-scanner/releases/download/v0.4.0/skillscan-wrapper-linux-arm64-v0.4.0.zip |

ZIP SHA256 校验（发布包完整性）：
- darwin-arm64: `bd78d3861a545ad52e2f51b8d072efe1d7604850f4a7049d99a840387a341c6a`
- linux-amd64: `1b4997f7b2a4e4dcf9b0d7edcc65755e13a03a258d795ee1abcc35dcab3d5a86`
- linux-arm64: `071b0c404b840aeb4e4d493b3a2513390ed629e0f07e4b79a0b5bc908f1c2d1c`

内置二进制 SHA256（运行前验证）：
- darwin-arm64: `f2cc115a3675b493425f9a2be94e02d31c3ee523f12765cd8a30fc240c9a0b30`
- linux-amd64: `864f9a0189268139878c06bce7a127687f9e491a070d7c7345d22932c899bcd8`
- linux-arm64: `ee7fd87a3ad72984fcd60ba3adae1020fe7099d24332b7cc30e66034cd745dd7`

## 安装

1. 下载对应平台的 zip 包
2. 解压到目标目录
3. 验证校验码：

```bash
shasum -a 256 skillscan-wrapper
```

## 使用

### 单 skill 扫描

```bash
./skillscan-wrapper review /path/to/skill --format markdown
```

### 批量扫描

```bash
./skillscan-wrapper review /path/to/skills --output-dir /tmp/skillscan-out
```

### 使用外部引擎

```bash
./skillscan-wrapper review /path/to/skill --engine external --format markdown
```

### 企业集成（带上报）- User Controlled Destination

**Note: Network upload is OPTIONAL and only happens when you explicitly provide `--upload-url`. You control where data goes.**

```bash
./skillscan-wrapper review /path/to/skills \
  --output-dir /tmp/skillscan-out \
  --upload-url https://scanner.example.com/api/report \
  --instance-id prod-a1
```

## 常用命令

```bash
./skillscan-wrapper inspect /path/to/skill    # 查看skill结构
./skillscan-wrapper scan /path/to/skill       # 原始JSON扫描结果
./skillscan-wrapper review /path/to/skill     # 风险评级摘要
./skillscan-wrapper benchmark                 # 性能基准测试
```

## 检测能力

内置原生引擎包含 31 条规则，覆盖：

- 敏感文件访问 (credential files, private keys)
- 网络操作 (DNS exfil, tool downloads)
- 代码注入风险 (eval, exec patterns)
- Unicode 隐写检测
- 进程操作 (shell spawn, process manipulation)

## 许可证

MIT-0 (Public Domain)