Security scanner for third-party AI agent-skill files (SKILL.md manifests, hooks, bundled scripts). CLI, library, MCP server, and GitHub Action, all reading the same 10 rule packs, including cross-skill privilege chaining and prompt-injection detection. Zero-auth, zero-config npx or pip scan.

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "skillguard": {
      "command": "npx",
      "args": [
        "-y",
        "RudrenduPaul/skillguard"
      ]
    }
  }
}

README Excerpt

<div align="center"> Scans third-party AI agent-skill files (`SKILL.md` manifests, hooks, and bundled scripts) for known attack patterns before they run, and is the only scanner in its category you can also call as an MCP tool from inside another agent.

Tools (3)

HIGHhumanmcp

Topics

agent-skillsai-agentsclideveloper-toolsgithub-actionllm-securitymcpprompt-injectionpythonsarifsastsecuritysecurity-scannerstatic-analysissupply-chain-security

skillguard

Quick Install

README Excerpt

Tools (3)

Topics

Related AI/LLM Servers