Skill Scanner
Skill Scanner is a security scanner that checks AI agent skills for prompt injection, data theft, and malicious code before you install them.
What it is good for
- Checking an agent skill for hidden malicious instructions before use
- Finding data exfiltration risks in third-party agent add-ons
- Adding a security check to a skill repository before each commit
- Reviewing agent skill code for risky patterns in CI builds
At a glance
- Who it is for
- Setup
- Guided command-line setup
Level 4 of 5. You copy and paste commands into a terminal by following the instructions. Comfortable territory for vibe coders.
- Cost
- Free and open source
- Type
- Agent app
- Tasks
- Works with
- GitHub Actions, pre-commit, OpenAI Codex Skills, Cursor Agent Skills, Claude Code
Momentum
- Rank this week
- Not ranked yet
- Best rank
- None yet
- GitHub stars
- 2,682
GitHub numbers as of Nov 2, 2026. Updated weekly.
Official links
Setup steps are on the official pages. We do not repeat them here, since they change.
Questions
- Is Skill Scanner free?
- Yes. It is free and open source.
- Do I need to know how to code to use Skill Scanner?
- You do not need to write code, but setup means copying and pasting commands into a terminal by following its instructions.
- What does Skill Scanner work with?
- According to its own documentation, it works with GitHub Actions, pre-commit, OpenAI Codex Skills, Cursor Agent Skills, and Claude Code.
- What is Skill Scanner good for?
- Checking an agent skill for hidden malicious instructions before use, finding data exfiltration risks in third-party agent add-ons, adding a security check to a skill repository before each commit, and reviewing agent skill code for risky patterns in CI builds.
Similar agents
- Multica
Multica is a workspace that lets teams assign issues to AI coding agents like teammates for developers and managers who run several agents.
- Vibe Kanban
Vibe Kanban is a kanban board that plans work and runs coding agents in isolated workspaces for developers and vibe coders.
- Happy
Happy is an agent app that runs Claude, Codex, and Grok in one app for people who code with several AI models.
- CodeBurn
CodeBurn is a local tool that tracks what your AI coding tools cost, broken down by project, model and task, for developers.
- PI-Desktop
PI-Desktop is a desktop app that runs a local AI coding agent and lets you manage projects, sessions, and plugins for it.
- Backlog.md
Backlog.md is a markdown task manager that gives humans and AI coding agents a shared project board inside any Git repository.