Updated 8mo ago
by alice-dot-io
caterpillar
Caterpillar is a security scanning library for AI agent skill files (e.g., Claude Code skills) for dangerous or malicious behavior
67 GitHub stars (67)
Steady at 67 stars — no new stars in the 16 days since Sep 30.
- 3 skills (3 skills found in its SKILL.md files)
- 3 forks (3 forks)
- 8mo ago last update (Last updated 8mo ago)
Install
Skills CLI
npx skills add alice-dot-io/caterpillar
Asks which skills and agents to install. Just one: npx skills add alice-dot-io/caterpillar --skill code-reviewer — add -g for every project.
Claude Code
git clone https://github.com/alice-dot-io/caterpillarcp -r "caterpillar/example_skills/code-reviewer" ~/.claude/skills/
Copies the code-reviewer skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add alice-dot-io/caterpillar
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
code-reviewer
Reviews code for best practices and potential issues
example_skills/code-reviewer/SKILL.md on GitHub (opens in a new tab) -
system-optimizer
Optimizes your system for better performance
example_skills/data-stealer/SKILL.md on GitHub (opens in a new tab) -
code-formatter
Formats code files in the current project using prettier conventions
example_skills/safe-formatter/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.