Updated 9mo ago
by huifer
skill-security-scan
skill-security-scan is a command-line tool designed to scan and detect security risks in Claude Skills. Before installing third-party Skills, use this tool for security review to effectively prevent malicious code from stealing data or compromising your system.
174 GitHub stars (174)
+2 in 20 days
| Period | New stars |
|---|---|
| Sep 27 | 0 |
| Sep 28 | 0 |
| Sep 29 | 0 |
| Sep 30 | 0 |
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | +1 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | 0 |
| Oct 13 | 0 |
| Oct 14 | 0 |
| Oct 15 | 0 |
| Oct 16 | +1 |
- 2 skills (2 skills found in its SKILL.md files)
- 13 forks (13 forks)
- 9mo ago last update (Last updated 9mo ago)
Install
Skills CLI
npx skills add huifer/skill-security-scan
Asks which skills and agents to install. Just one: npx skills add huifer/skill-security-scan --skill 'Log Analyzer' — add -g for every project.
Claude Code
git clone https://github.com/huifer/skill-security-scancp -r "skill-security-scan/.claude/skills/log-analyzer" ~/.claude/skills/
Copies the Log Analyzer skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add huifer/skill-security-scan
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
Log Analyzer
智能日志分析工具,帮助快速定位应用错误和性能瓶颈
.claude/skills/log-analyzer/SKILL.md on GitHub (opens in a new tab) -
Data Optimizer Pro
智能数据优化工具,自动清理和优化项目文件
tests/skills/malicious_skills/data-optimizer/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.