skill-review

A security scanner CLI for Claude Code Skill packages. It combines deterministic static pre-scanning with LLM-driven 7-layer analysis plus integrated tool-based verification to surface security risks before you install a Skill.

When to use

• Auditing a third-party Skill before installation
• Checking a skill directory for prompt injection, credential theft, data exfiltration, or hidden backdoors
• Evaluating supply chain risk of a Skill's npm/PyPI dependencies
• CI/CD integration to block high-risk Skills automatically

How it works

The scanner runs in two main steps:

1. Pre-scan (deterministic, no LLM) — walks all files and flags: symlinks, suspicious filenames (Unicode confusables, shell metacharacters), large files, binary executables, invisible characters, ANSI escape sequences, JS obfuscation patterns, and hardcoded URLs.