Updated 3w ago
by mondoohq
skillcheck
Scan your machine for malicious AI agent skills — supports Claude Code, OpenAI Codex, and more.
21 GitHub stars (21)
+5 in 30 days
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | 0 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | 0 |
| Oct 13 | 0 |
| Oct 14 | 0 |
| Oct 15 | 0 |
| Oct 16 | 0 |
| Oct 17 | 0 |
| Oct 18 | +1 |
| Oct 19 | 0 |
| Oct 20 | 0 |
| Oct 21 | 0 |
| Oct 22 | 0 |
| Oct 23 | 0 |
| Oct 24 | 0 |
| Oct 25 | 0 |
| Oct 26 | 0 |
| Oct 27 | 0 |
| Oct 28 | +1 |
| Oct 29 | +1 |
| Oct 30 | 0 |
| Oct 31 | 0 |
| Nov 1 | 0 |
| Nov 2 | 0 |
| Nov 3 | 0 |
| Nov 4 | +1 |
| Nov 5 | 0 |
| Nov 6 | +1 |
- 4 skills (4 skills found in its SKILL.md files)
- 3 forks (3 forks)
- 3w ago last update (Last updated 3w ago)
Install
Skills CLI
npx skills add mondoohq/skillcheck
Asks which skills and agents to install. Just one: npx skills add mondoohq/skillcheck --skill MySkill — add -g for every project.
Claude Code
git clone https://github.com/mondoohq/skillcheckcp -r "skillcheck/internal/validate/testdata/bad/skills/MySkill" ~/.claude/skills/
Copies the MySkill skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add mondoohq/skillcheck
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
MySkill
A deliberately non-conformant skill used to exercise the validator.
internal/validate/ on GitHub (opens in a new tab)testdata/ bad/ skills/ MySkill/ SKILL.md -
sample-skill
A valid sample skill used to exercise the validator. Use when testing skillcheck validate.
internal/validate/ on GitHub (opens in a new tab)testdata/ good/ skills/ sample-skill/ SKILL.md -
long-compat
A skill whose name and description are valid but whose other fields break the spec.
internal/validate/ on GitHub (opens in a new tab)testdata/ spec-violations/ skills/ long-compat/ SKILL.md -
demo-skill
A valid skill nested in a plugin directory, to exercise discovery below skills/.
internal/validate/ on GitHub (opens in a new tab)testdata/ good/ plugins/ demo/ skills/ demo-skill/ SKILL.md
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.
Similar skills
-
SkillSpectorby NVIDIA Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and…
-
reaby morluto Reverse engineer anything with agents, from app behavior down to native binaries.
-
ponytailby DietrichGebert Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
-
agent-skillsby addyosmani Production-grade engineering skills for AI coding agents.
-
taste-skillby Leonxlnx Agent skills that give coding agents taste: art direction, reference images and a browser check instead of generic AI pages
-
archifyby tt-a1i Turn any idea, plan, or codebase into a beautiful interactive diagram. An agent skill for Claude Code, Codex, and more.