Skill Scanner
Overview
Open-source security scanner for agent skills to detect prompt injection, data exfiltration, and malicious code patterns with SARIF output.
Best For Professions:
Skill Scanner is an open-source security scanner for AI agent skills that helps developers and security teams assess whether a skill is safe to use. It detects threats such as prompt injection, data exfiltration attempts, and malicious code patterns by combining multiple analysis engines, including pattern-based detection (YAML + YARA), behavioral dataflow analysis, and LLM-assisted semantic review. It is designed for CI/CD usage and supports SARIF output for GitHub Code Scanning, enabling automated gating and actionable reports with file locations, severity, and remediation guidance. The project supports skill formats such as OpenAI Codex Skills and Cursor Agent Skills that follow the Agent Skills specification.
Product overview
Capabilities, pricing and fit
Skill Scanner is best understood as an open-source security scanner for agent skills. Cisco AI Defense presents Skill Scanner as a security scanner for agent skills.
Information as of July 30, 2026
What it can do
- Software testing automation
Cisco AI Defense presents Skill Scanner as a security scanner for agent skills.[1]
Where it fits best
- Screening an agent-skill package before adoption.[1]
Pricing and availability
Access: Source repository[1]
Sources (1)
- GitHub - cisco-ai-defense/skill-scanner: Security Scanner for Agent Skills · GitHubGitHub · checked 2026-07-30
Autonomy level
1/100
Our subjective rating of how independently the product carries out its documented tasks, considering the human setup, input, approval and review it needs. This is not a measured success rate.
Comparisons
Custom Comparisons
Some of the use cases of Skill Scanner:
- Scanning agent skill packages for prompt injection and data exfiltration patterns before adoption.
- Adding supply-chain security checks for agent skills in CI/CD using SARIF and exit codes.
- Detecting suspicious behaviors via dataflow analysis in skill code and configurations.
- Creating and extending custom analyzers and detection rules through a plugin architecture.
Loading Community Opinions...
Pricing model:
Code access:
Popularity level: 75%
Tags:
Skill Scanner Video:
Turn this profile into a trust signal
Show prospects that Skill Scanner has a public place where they can check product details, pricing, ratings, and reviews.
Build confidence
Give buyers a third-party profile to explore.
Reduce hesitation
Put validation beside your strongest CTA.
Earn discovery
Every badge links prospects to your listing.
Choose your style
Preview it, then copy the complete embed code.
Shows buyers where to validate your product, pricing, and reputation.
Plain HTML. No signup, script, or maintenance required.
AI Agent Store · Specialist AI agentsFor ai application security consultancies
Your AI agent for agent-skill security findings.
Exploring Skill Scanner? For AI application security consultancies, your own AI agent can scope AI security assessments, test application failure modes, and verify client remediation. Start with a setup tailored to this work.
- ✓ Scope AI security assessments
- ✓ Test application failure modes
- ✓ Verify client remediation
Tailored starting setup. Chat on our site. See the workflow and monthly plan.