More screenshots

    Works with the AI tools you already use

    Claude CodeClaude CodeCursorCursorCodex CLICodex CLIGitHub CopilotGitHub CopilotGemini CLIGemini CLI+20 more

    🛡️ Skill Injection Scanner

    1

    Review Markdown and YAML skill files for suspicious instruction patterns, with source excerpts withheld and incomplete inputs clearly flagged. Requires Python 3.12+.

    $15

    Secure checkout via Stripe

    30-day refund guarantee

    Converts to your local currency at checkout

    0 installsSecurity scanned
    🛡️ Skill Injection Scanner

    🛡️ Skill Injection Scanner

    Example session with this skill installed

    Run python scripts/scan_skill_injection.py fixtures/risky-sample on the included synthetic fixture. Report the detector output without executing anything in the fixture.

    • Read your context and instructions
    • Compiled the injection scanner
    • Generated the document

    Skill Injection Scanner Report

    Status: REVIEW (not a safety certification)

    Files scanned: 2
    Findings: 9

    [CRITICAL] SIS001 - fixtures\risky-sample\SKILL.md:15

    Secret or environment reference is paired with outbound wording.
    Evidence: [withheld: inspect the cited source locally]

    [HIGH] SIS002 - fixtures\risky-sample\SKILL.md:11

    Conditional trigger includes a side effect.
    Evidence: [withheld: inspect the cited source locally]

    [HIGH] SIS004 - fixtures\risky-sample\SKILL.md:15

    HTML comment contains imperative instruction wording.
    Evidence: [withheld: inspect the cited source locally]

    [MEDIUM] SIS005 - fixtures\risky-sample\SKILL.md:17

    Long base64-looking blob found.
    Evidence: [withheld: inspect the cited source locally]

    [MEDIUM] SIS006 - fixtures\risky-sample\SKILL.md:17

    Single unusually long token found.
    Evidence: [withheld: inspect the cited source locally]

    [HIGH] SIS007 - fixtures\risky-sample\SKILL.md:13

    Remote content is described as instructions to follow.
    Evidence: [withheld: inspect the cited source locally]

    [HIGH] SIS008 - fixtures\risky-sample\SKILL.md:19

    Unsafe command behavior is described as an instruction risk.
    Evidence: [withheld: inspect the cited source locally]

    [HIGH] SIS008 - fixtures\risky-sample\SKILL.md:19

    Unsafe command behavior is described as an instruction risk.
    Evidence: [withheld: inspect the cited source locally]

    [MEDIUM] SIS009 - fixtures\risky-sample\agents\openai.yaml:1

    Broad tool access is requested without a scope justification.
    Evidence: [withheld: inspect the cited source locally]

    skill-injection-scanner.pdf

    PDF · document

    Generated

    Example file from a real run - the skill writes it into your workspace.

    Connects securely to your tools. The creator never sees your data.

    What you get

    Screen third-party Markdown/YAML skill files for suspicious instruction patternsFlag secret-and-outbound wording in Markdown/YAML for manual reviewFlag overbroad permission requests in YAML configurationsGet file, line and rule references without copying source excerpts into reports

    About this skill

    Review a skill before you enable it

    Skill Injection Scanner applies local text heuristics to Markdown and YAML files in a stable skill-package copy. It flags secret-and-outbound wording, conditional side effects, hidden comments, invisible characters, encoded-looking blobs, remote instruction fetches, unsafe-command references and broad capability requests.

    What the report tells you

    Each finding retains its rule, severity, file and line. Version 1.1.0 withholds source excerpts instead of repeating potentially sensitive text. CANNOT_ASSESS means inputs were incomplete; REVIEW means findings need interpretation; NO_MATCHES means only that no rule matched within the inspected scope.

    Requirements and limits

    Requires local Python 3.12+ and permission to read the selected package. Standard library only; no network or package edits. Missing, unreadable, invalid-UTF-8 and linked inputs are reported rather than silently treated as clean. The detector does not scan Python or shell source, execute the package, test runtime defenses, certify safety or protect against concurrent filesystem changes. Paths may still contain private information. Review findings manually and inspect code and provenance separately.

    How to install

    Works the same in every agent - Claude, Cursor, Codex, Copilot and 20+ more.

    ~30 seconds
    1. 1

      Download the ZIP

      Free skills download straight away. Paid skills unlock right after purchase.

    2. 2

      Unzip into your skills folder

      Every agent reads skills from one folder on your machine. Drop the unzipped folder in there.

    3. 3

      Ask your agent to use it

      Restart the agent if it was already running. It picks the skill up automatically - no config needed.

    Skills folder by agent

    Click the path to copy it. Create the folder if it does not exist yet.

    Reviews

    No reviews yet

    Be one of the first to try it. Every listed skill passes our trust checks below.

    Security scanned

    Passed our 8-point scan before listing

    Fresh listing

    Recently published to Agensi

    30-day refund

    Not a fit? Get your money back

    Trust & safety

    Security scanned

    Verified clean 15 days ago

    • Passed all security checks, Safe to install

    Listed3 months ago
    Updated15 days ago

    What's inside

    Frequently Asked Questions