Updated 10mo ago
by huifer
skill-security-scan
skill-security-scan is a command-line tool designed to scan and detect security risks in Claude Skills. Before installing third-party Skills, use this tool for security review to effectively prevent malicious code from stealing data or compromising your system.
176 GitHub stars (176)
+4 in 30 days
| Period | New stars |
|---|---|
| Sep 27 | 0 |
| Sep 28 | 0 |
| Sep 29 | 0 |
| Sep 30 | 0 |
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | +1 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | 0 |
| Oct 13 | 0 |
| Oct 14 | 0 |
| Oct 15 | 0 |
| Oct 16 | +1 |
| Oct 17 | 0 |
| Oct 18 | +1 |
| Oct 19 | −1 |
| Oct 20 | 0 |
| Oct 21 | 0 |
| Oct 22 | 0 |
| Oct 23 | +1 |
| Oct 24 | 0 |
| Oct 25 | 0 |
| Oct 26 | 0 |
| Oct 27 | 0 |
| Oct 28 | 0 |
| Oct 29 | −1 |
| Oct 30 | 0 |
| Oct 31 | +1 |
| Nov 1 | 0 |
| Nov 2 | 0 |
| Nov 3 | 0 |
| Nov 4 | +1 |
| Nov 5 | 0 |
- 2 skills (2 skills found in its SKILL.md files)
- 13 forks (13 forks)
- 10mo ago last update (Last updated 10mo ago)
Install
Skills CLI
npx skills add huifer/skill-security-scan
Asks which skills and agents to install. Just one: npx skills add huifer/skill-security-scan --skill 'Log Analyzer' — add -g for every project.
Claude Code
git clone https://github.com/huifer/skill-security-scancp -r "skill-security-scan/.claude/skills/log-analyzer" ~/.claude/skills/
Copies the Log Analyzer skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add huifer/skill-security-scan
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
Log Analyzer
智能日志分析工具,帮助快速定位应用错误和性能瓶颈
.claude/skills/ on GitHub (opens in a new tab)log-analyzer/ SKILL.md -
Data Optimizer Pro
智能数据优化工具,自动清理和优化项目文件
tests/skills/ on GitHub (opens in a new tab)malicious_skills/ data-optimizer/ SKILL.md
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.