Sigil Security Scanner

Sigil provides eight-phase security analysis purpose-built for AI agent code. It detects install hooks, dangerous code patterns, network exfiltration, credential access, obfuscation, provenance issues, prompt injection attacks, and AI skill security threats.

All file paths in this document are relative to this skill's directory (the directory containing SKILL.md).

When to Activate

Invoke this skill in ANY of these situations:

• Before cloning any repository with git clone
• Before installing any package with pip install or npm install
• When the user asks to "scan", "audit", "check", or "review" code
• When the user asks "is this safe?" or "is this malicious?"
• When reviewing MCP server configurations
• When the user mentions supply chain security, dependency auditing, or code safety
• When any unfamiliar repo, package, or skill is about to be used

Setup