Security audit tool for AI agent skills. Scans skill packages for malware, credential theft, and suspicious patterns before installation. Defensive security...
---
name: skillscan-wrapper
description: Security audit tool for AI agent skills. Scans skill packages for malware, credential theft, and suspicious patterns before installation. Defensive security tool with optional enterprise reporting (user-controlled destination).
license: MIT-0
metadata:
author: cyzlmh
tags:
- security
- scanner
- audit
- skill-security
- malware-detection
triggers:
- "scan this skill"
- "audit skill before install"
- "check skill security"
- "review skill package"
permissions:
network: "optional - only for enterprise reporting (--upload-url) or external scanner (--engine external), both user-controlled"
files_read: "skill directories being scanned, no user credentials or identity files"
files_write: "optional output directory (--output-dir), user-specified only"
---
# Skill Scan Wrapper
**DEFENSIVE SECURITY TOOL** - Use this skill to audit other skills before installation.
When you need to scan a skill package, archive, or release bundle for security risks, use this tool. It helps detect malicious patterns like credential theft, data exfiltration, and code injection before you install unknown skills.
## Security Guarantees
This tool **DOES NOT**:
- Read your credentials, SSH keys, AWS configs, or any identity files
- Access MEMORY.md, USER.md, SOUL.md, or agent identity files
- Send data anywhere without your explicit command
- Modify system files outside your specified workspace
- Request elevated/sudo permissions
This tool **ONLY**:
- Reads skill files you explicitly ask it to scan
- Writes reports to directories you explicitly specify
- Optionally sends reports to URLs you explicitly provide (enterprise integration)
- Uses SHA-256 checksums to verify binary integrity
## Source Transparency
This tool includes a compiled Rust binary. Source code is available at:
- Gitee: https://gitee.com/random_player/cmic-skill-scanner
- All releases include SHA-256 checksums for integrity verification
- Build from source: `cargo build --release` (see repo README)
## 功能
- 内置 Rust 原生引擎,无需外部依赖即可运行
- 可选桥接 Cisco Skill Scanner (external engine) 获更强检测能力
- 支持单 skill 和批量目录扫描
- 输出风险评级与发现项摘要
## 下载
从以下地址下载对应平台的二进制包:
| 平台 | 下载地址 |
|------|----------|
| macOS ARM64 | https://gitee.com/random_player/cmic-skill-scanner/releases/download/v0.4.0/skillscan-wrapper-darwin-arm64-v0.4.0.zip |
| Linux x64 | https://gitee.com/random_player/cmic-skill-scanner/releases/download/v0.4.0/skillscan-wrapper-linux-amd64-v0.4.0.zip |
| Linux ARM64 | https://gitee.com/random_player/cmic-skill-scanner/releases/download/v0.4.0/skillscan-wrapper-linux-arm64-v0.4.0.zip |
ZIP SHA256 校验(发布包完整性):
- darwin-arm64: `bd78d3861a545ad52e2f51b8d072efe1d7604850f4a7049d99a840387a341c6a`
- linux-amd64: `1b4997f7b2a4e4dcf9b0d7edcc65755e13a03a258d795ee1abcc35dcab3d5a86`
- linux-arm64: `071b0c404b840aeb4e4d493b3a2513390ed629e0f07e4b79a0b5bc908f1c2d1c`
内置二进制 SHA256(运行前验证):
- darwin-arm64: `f2cc115a3675b493425f9a2be94e02d31c3ee523f12765cd8a30fc240c9a0b30`
- linux-amd64: `864f9a0189268139878c06bce7a127687f9e491a070d7c7345d22932c899bcd8`
- linux-arm64: `ee7fd87a3ad72984fcd60ba3adae1020fe7099d24332b7cc30e66034cd745dd7`
## 安装
1. 下载对应平台的 zip 包
2. 解压到目标目录
3. 验证校验码:
```bash
shasum -a 256 skillscan-wrapper
```
## 使用
### 单 skill 扫描
```bash
./skillscan-wrapper review /path/to/skill --format markdown
```
### 批量扫描
```bash
./skillscan-wrapper review /path/to/skills --output-dir /tmp/skillscan-out
```
### 使用外部引擎
```bash
./skillscan-wrapper review /path/to/skill --engine external --format markdown
```
### 企业集成(带上报)- User Controlled Destination
**Note: Network upload is OPTIONAL and only happens when you explicitly provide `--upload-url`. You control where data goes.**
```bash
./skillscan-wrapper review /path/to/skills \
--output-dir /tmp/skillscan-out \
--upload-url https://scanner.example.com/api/report \
--instance-id prod-a1
```
## 常用命令
```bash
./skillscan-wrapper inspect /path/to/skill # 查看skill结构
./skillscan-wrapper scan /path/to/skill # 原始JSON扫描结果
./skillscan-wrapper review /path/to/skill # 风险评级摘要
./skillscan-wrapper benchmark # 性能基准测试
```
## 检测能力
内置原生引擎包含 31 条规则,覆盖:
- 敏感文件访问 (credential files, private keys)
- 网络操作 (DNS exfil, tool downloads)
- 代码注入风险 (eval, exec patterns)
- Unicode 隐写检测
- 进程操作 (shell spawn, process manipulation)
## 许可证
MIT-0 (Public Domain)don't have the plugin yet? install it then click "run inline in claude" again.