AcademySkillsDevelopment

Skill Scanner

Security and engineering teams that review third-party agent skills before allowing them in their company.

  • Recommendedour rating
  • 2,587gitHub stars
  • Not statedlicence
  • 2 days agolast update
git clone https://github.com/cisco-ai-defense/skill-scanner.git

What it does

A security scanner for agent skills made by Cisco AI Defense. It looks for prompt injection, data exfiltration and malicious code patterns using pattern rules, code and dataflow analysis, and an optional language model judge. It gives best-effort results, so treat it as one check and not a guarantee.

Use cases

  1. 01Check a downloaded skill before installing it
  2. 02Review skills from a shared team library
  3. 03Add a skill check to a review process

Questions about
Skill Scanner.

What is Skill Scanner used for?

Security and engineering teams that review third-party agent skills before allowing them in their company. A security scanner for agent skills made by Cisco AI Defense. It looks for prompt injection, data exfiltration and malicious code patterns using pattern rules, code and dataflow analysis, and an optional language model judge. It gives best-effort results, so treat it as one check and not a guarantee.

How do I install Skill Scanner?

Run this in your terminal: git clone https://github.com/cisco-ai-defense/skill-scanner.git

Is Skill Scanner open source?

The code is on GitHub (cisco-ai-defense/skill-scanner). Check the licence in the repository before using it at work.

Is Skill Scanner safe to use?

It passed our automatic scan for credential theft, hidden instructions and risky install commands. Third party open source software. Sabemos AI does not maintain it. Check the code and permissions before you connect it to company data.