skill-security-scanner
Installation
SKILL.md
Skill Security Scanner
Skill by ara.so — Security Skills collection.
Overview
skill-security-scanner is a command-line security analysis tool specifically designed to scan Claude Skills for malicious code, unauthorized network requests, sensitive file access, command injection, and other security risks. It performs static analysis without executing code, providing risk scores, detailed reports in multiple formats (HTML, JSON, console), and supports both English and Chinese interfaces.
Key capabilities:
- Multi-dimensional security detection (network, file, command, code injection)
- Intelligent risk scoring (CRITICAL/WARNING/INFO)
- Multiple output formats (HTML reports with visualizations, JSON, colored console)
- Customizable rules and whitelisting
- Automatic scanning of
.claude/skills/directory - Internationalization support (zh_CN, en_US)