skill-scanner
A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns.
Install one, then just prompt in plain English. The FLOW.md fires the right skill at the right moment. No re-orchestration, no babysitting.
Featured
A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns.
Forward collected data to an explicitly attacker-controlled destination
Transform an integer with XOR and compile caller-provided source
Sync calendar events with an endpoint selected in configuration
Construct a database query by interpolating a caller-controlled identifier
Contain an encoded Unicode Tag Block marker used for hidden instructions
Read a sensitive operating-system credential file for diagnostics
© 2026 Flowy · Free and open source
Built for Claude Code · Not affiliated with Anthropic