AgentGuard

SkillSpector is an open-source security scanner for AI agent skills, developed by NVIDIA. It scans Git repositories, URLs, ZIP archives, directories, and individual skill files before installation, looking for prompt injection, data exfiltration, privilege escalation, supply-chain issues, dangerous code, MCP permission problems, tool poisoning, and other malicious patterns. Its two-stage pipeline combines static analysis—including regex, Python AST, taint tracking, YARA signatures, and OSV.dev dependency lookups—with optional LLM-based semantic evaluation. It produces terminal, JSON, Markdown, or SARIF reports containing findings, severity labels, a 0–100 risk score, and installation recommendations. Baselines can suppress accepted findings, and the CLI can be used in CI or install gates through exit codes and machine-readable output. SkillSpector can also run as an MCP server callable by compatible agents. It does not execute scanned skills or sandbox them; optional LLM analysis sends eligible file contents to the configured provider, while dependency checks query OSV.dev. The project is distributed under the Apache License 2.0 and is part of NVIDIA's Verified Skills pipeline.

Agent Skills is a curated skill registry and npm-based CLI for extending AI coding agents such as Claude Code, Cursor, Copilot, and Antigravity with packaged instructions, templates, and reference files. The CLI fetches a catalog, lets users search and select skills, caches downloads locally, and installs them to selected agents by copying or symlinking them at global or project scope; it also supports updating, removing, auditing, and managing cached skills. The repository describes the catalog as an open-source, human-curated library with CI static analysis, content hashing, lockfiles, path isolation, symlink guards, sanitization, audit logging, and Snyk Agent Scan checks. It also includes an MCP server that exposes progressive-disclosure tools for listing, searching, reading, and fetching skill files. The CLI source is MIT-licensed; maintainer-authored skills are generally CC BY 4.0, while third-party skills retain their own licenses.

security-audit is a Cloudflare coding-agent skill that orchestrates multi-phase security audits of codebases. It uses reconnaissance to map architecture, trust boundaries, input surfaces, prior evidence, and deterministic coverage; assigns isolated agents to coverage-led hunting; sends each unique candidate to a fresh verifier; and records confirmed, needs_validation, and rejected results in machine-readable findings.json validated against a report schema. Independent agents verify final source claims, after which the skill derives target-neutral reports and coverage records. It can be installed with the Skills CLI and requires a tool-using coding agent with parallel sub-agent support, Node.js for its validators, and an OS-enforced sandbox for target-controlled execution. The repository is licensed under MIT.

geiger is a read-only command-line scanner from Atomburst that inventories AI agents, harnesses, MCP servers, plugins, skills, hooks, browser extensions, desktop AI applications, and related IDE configurations on a machine. It reads known configuration files and directories, identifies each finding's origin and evidence path, and labels capabilities such as code execution, secret storage, broad filesystem access, broad web access, and network access. Credential-shaped values are reported by key name, file, and secret type without exposing value contents; the scanner performs no telemetry and writes only an explicitly requested report file. It can emit terminal, HTML, or versioned JSON reports, scan specified project or home directories, enforce a strict exit status for findings that can execute code or hold secrets, and compare JSON snapshots to identify newly appeared, removed, or escalated findings. It runs through npx with Node.js 18 or newer, has no runtime dependencies or account requirement, and is licensed under MIT. The project notes that it reads configuration rather than runtime behavior, covers known locations, and does not determine whether a package is malicious.

iFixAi is an open-source tool for independently auditing AI agents against business, governance, safety, and operational requirements. It runs a diagnostic through a CLI, an agent plugin or skill, or an HTTP/provider adapter; the agent under test is evaluated with inspections covering tool authorization, privilege escalation, prompt injection, policy violations, private-data handling, uncertainty, failures, instruction following, and related risks. Runs produce JSON and Markdown reports with a scorecard based on five core pillars: fabrication, manipulation, deception, unpredictability, and opacity. The repository includes 60 inspections, configurable suites, self- or independently judged evaluation, fixture authoring, and support for testing a deployed agent or a bare model. The engine is free and distributed under the Apache 2.0 license; iFixAi Pro is a separate auditing service with additional inspections, reports, and an audit dashboard.