Skill: cyzlmh/skillscan-wrapper (version 0.4.1)

--- name: skillscan-wrapper description: Security audit tool for AI agent skills. Scans skill packages for malware, credential theft, and suspicious patterns before installation. Defensive security tool with optional enterprise reporting (user-controlled destination). license: MIT-0 metadata: author: cyzlmh tags: - security - scanner - audit - skill-security - malware-detection triggers: - "scan this skill" - "audit skill before install" - "check skill security" - "review skill package" permissions: network: "optional - only for enterprise reporting (--upload-url) or external scanner (--engine external), both user-controlled" files_read: "skill directories being scanned, no user credentials or identity files" files_write: "optional output directory (--output-dir), user-specified only" --- # Skill Scan Wrapper **DEFENSIVE SECURITY TOOL** - Use this skill to audit other skills before installation. When you need to scan a skill package, archive, or release bundle for security risks, use this tool. It helps detect malicious patterns like credential theft, data exfiltration, and code injection before you install unknown skills. ## Security Guarantees This tool **DOES NOT**: - Read your credentials, SSH keys, AWS configs, or any identity files - Access MEMORY.md, USER.md, SOUL.md, or agent identity files - Send data anywhere without your explicit command - Modify system files outside your specified workspace - Request elevated/sudo permissions This tool **ONLY**: - Reads skill files you explicitly ask it to scan - Writes reports to directories you explicitly specify - Optionally sends reports to URLs you explicitly provide (enterprise integration) - Uses SHA-256 checksums to verify binary integrity ## Source Transparency This tool includes a compiled Rust binary. Source code is available at: - Gitee: https://gitee.com/random_player/cmic-skill-scanner - All releases include SHA-256 checksums for integrity verification - Build from source: `cargo build --release` (see repo README) ## 功能 - 内置 Rust 原生引擎，无需外部依赖即可运行 - 可选桥接 Cisco Skill Scanner (external engine) 获更强检测能力 - 支持单 skill 和批量目录扫描 - 输出风险评级与发现项摘要 ## 下载 从以下地址下载对应平台的二进制包： | 平台 | 下载地址 | |------|----------| | macOS ARM64 | https://gitee.com/random_player/cmic-skill-scanner/releases/download/v0.4.0/skillscan-wrapper-darwin-arm64-v0.4.0.zip | | Linux x64 | https://gitee.com/random_player/cmic-skill-scanner/releases/download/v0.4.0/skillscan-wrapper-linux-amd64-v0.4.0.zip | | Linux ARM64 | https://gitee.com/random_player/cmic-skill-scanner/releases/download/v0.4.0/skillscan-wrapper-linux-arm64-v0.4.0.zip | ZIP SHA256 校验（发布包完整性）： - darwin-arm64: [REDACTED_SECRET] - linux-amd64: [REDACTED_SECRET] - linux-arm64: [REDACTED_SECRET] 内置二进制 SHA256（运行前验证）： - darwin-arm64: [REDACTED_SECRET] - linux-amd64: [REDACTED_SECRET] - linux-arm64: [REDACTED_SECRET] ## 安装 1. 下载对应平台的 zip 包 2. 解压到目标目录 3. 验证校验码： ```bash shasum -a 256 skillscan-wrapper ``` ## 使用 ### 单 skill 扫描 ```bash ./skillscan-wrapper review /path/to/skill --format markdown ``` ### 批量扫描 ```bash ./skillscan-wrapper review /path/to/skills --output-dir /tmp/skillscan-out ``` ### 使用外部引擎 ```bash ./skillscan-wrapper review /path/to/skill --engine external --format markdown ``` ### 企业集成（带上报）- User Controlled Destination **Note: Network upload is OPTIONAL and only happens when you explicitly provide `--upload-url`. You control where data goes.** ```bash ./skillscan-wrapper review /path/to/skills \ --output-dir /tmp/skillscan-out \ --upload-url https://scanner.example.com/api/report \ --instance-id prod-a1 ``` ## 常用命令 ```bash ./skillscan-wrapper inspect /path/to/skill # 查看skill结构 ./skillscan-wrapper scan /path/to/skill # 原始JSON扫描结果 ./skillscan-wrapper review /path/to/skill # 风险评级摘要 ./skillscan-wrapper benchmark # 性能基准测试 ``` ## 检测能力 内置原生引擎包含 31 条规则，覆盖： - 敏感文件访问 (credential files, private keys) - 网络操作 (DNS exfil, tool downloads) - 代码注入风险 (eval, exec patterns) - Unicode 隐写检测 - 进程操作 (shell spawn, process manipulation) ## 许可证 MIT-0 (Public Domain)


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)