- name
- skillscan-wrapper
- description
- Security audit tool for AI agent skills. Scans skill packages for malware, credential theft, and suspicious patterns before installation. Defensive security tool with optional enterprise reporting (user-controlled destination).
- license
- MIT-0
- metadata
- author
- cyzlmh
- tags
- triggers
- permissions
- network
- optional - only for enterprise reporting (--upload-url) or external scanner (--engine external), both user-controlled
- files_read
- skill directories being scanned, no user credentials or identity files
- files_write
- optional output directory (--output-dir), user-specified only
Skill Scan Wrapper
DEFENSIVE SECURITY TOOL - Use this skill to audit other skills before installation.
When you need to scan a skill package, archive, or release bundle for security risks, use this tool. It helps detect malicious patterns like credential theft, data exfiltration, and code injection before you install unknown skills.
Security Guarantees
This tool DOES NOT:
- Read your credentials, SSH keys, AWS configs, or any identity files
- Access MEMORY.md, USER.md, SOUL.md, or agent identity files
- Send data anywhere without your explicit command
- Modify system files outside your specified workspace
- Request elevated/sudo permissions
This tool ONLY:
- Reads skill files you explicitly ask it to scan
- Writes reports to directories you explicitly specify
- Optionally sends reports to URLs you explicitly provide (enterprise integration)
- Uses SHA-256 checksums to verify binary integrity
Source Transparency
This tool includes a compiled Rust binary. Source code is available at:
- Gitee: https://gitee.com/random_player/cmic-skill-scanner
- All releases include SHA-256 checksums for integrity verification
- Build from source:
cargo build --release(see repo README)
功能
- 内置 Rust 原生引擎，无需外部依赖即可运行
- 可选桥接 Cisco Skill Scanner (external engine) 获更强检测能力
- 支持单 skill 和批量目录扫描
- 输出风险评级与发现项摘要
下载
从以下地址下载对应平台的二进制包：
| 平台 | 下载地址 |
|---|---|
| macOS ARM64 | https://gitee.com/random_player/cmic-skill-scanner/releases/download/v0.4.0/skillscan-wrapper-darwin-arm64-v0.4.0.zip |
| Linux x64 | https://gitee.com/random_player/cmic-skill-scanner/releases/download/v0.4.0/skillscan-wrapper-linux-amd64-v0.4.0.zip |
| Linux ARM64 | https://gitee.com/random_player/cmic-skill-scanner/releases/download/v0.4.0/skillscan-wrapper-linux-arm64-v0.4.0.zip |
ZIP SHA256 校验（发布包完整性）：
- darwin-arm64:
bd78d3861a545ad52e2f51b8d072efe1d7604850f4a7049d99a840387a341c6a - linux-amd64:
1b4997f7b2a4e4dcf9b0d7edcc65755e13a03a258d795ee1abcc35dcab3d5a86 - linux-arm64:
071b0c404b840aeb4e4d493b3a2513390ed629e0f07e4b79a0b5bc908f1c2d1c
内置二进制 SHA256（运行前验证）：
- darwin-arm64:
f2cc115a3675b493425f9a2be94e02d31c3ee523f12765cd8a30fc240c9a0b30 - linux-amd64:
864f9a0189268139878c06bce7a127687f9e491a070d7c7345d22932c899bcd8 - linux-arm64:
ee7fd87a3ad72984fcd60ba3adae1020fe7099d24332b7cc30e66034cd745dd7
安装
- 下载对应平台的 zip 包
- 解压到目标目录
- 验证校验码：
shasum -a 256 skillscan-wrapper使用
单 skill 扫描
./skillscan-wrapper review /path/to/skill --format markdown批量扫描
./skillscan-wrapper review /path/to/skills --output-dir /tmp/skillscan-out使用外部引擎
./skillscan-wrapper review /path/to/skill --engine external --format markdown企业集成（带上报）- User Controlled Destination
Note: Network upload is OPTIONAL and only happens when you explicitly provide --upload-url. You control where data goes.
./skillscan-wrapper review /path/to/skills \
--output-dir /tmp/skillscan-out \
--upload-url https://scanner.example.com/api/report \
--instance-id prod-a1常用命令
./skillscan-wrapper inspect /path/to/skill # 查看skill结构
./skillscan-wrapper scan /path/to/skill # 原始JSON扫描结果
./skillscan-wrapper review /path/to/skill # 风险评级摘要
./skillscan-wrapper benchmark # 性能基准测试检测能力
内置原生引擎包含 31 条规则，覆盖：
- 敏感文件访问 (credential files, private keys)
- 网络操作 (DNS exfil, tool downloads)
- 代码注入风险 (eval, exec patterns)
- Unicode 隐写检测
- 进程操作 (shell spawn, process manipulation)
许可证
MIT-0 (Public Domain)