claude

skill-scan

Read-only security scan of AI agent skills, plugins and MCP configs before you install or share them

0 on GitHubby Ellen Jane Lomuntadv1.3.1MITupdated 8 days agosecurity
/

Plugin skill-scan from marketplace qa-spectre in ejlomuntad/qa-spectre. Commands read from the repo's manifest — 5 days ago.

What it installs

Skills (1)

  • skill-scan

    Security scan of AI agent skills, plugins and MCP configs before you install or share them, with nothing to install. Reads a skill folder, a SKILL.md, a plugin, a .mcp.json or a GitHub repo, runs pattern checks and a full read-through for prompt injection, data exfiltration, dangerous commands, pers

Subagents (1)

  • scan-reader

    Read-only helper for skill-scan. Reads one skill, plugin or MCP config (and the pattern matches the main scan gives it) and returns its findings in the skill-scan report format. It has no shell, can't write files and can't use the web.

View source on GitHub

More from ejlomuntad/qa-spectre

All 2 plugins →

testkit

claude

QA skills for any software project: API test plans and test cases from requirements and specs, and feature-by-feature API audits with bug tickets and pass notes

4 skills · 2 agents

0

Similar plugins

mattpocock-skills

claude

Matt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).

39 skills

mattpocock/skills 323,108

superpowers

claudecodex

Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques

15 skills · hooks

obra/superpowers 316,836

nextjs

claude

Official Next.js skills: adopt and optimize Cache Components, adopt Partial Prefetching, and verify runtime behavior against a running dev server.

6 skills

vercel/next.js 143,495

claude-mem

claudecodex

Persistent memory for Claude Code: the next session starts where the last one left off.

29 skills · 1 MCP server · hooks

thedotmack/claude-mem 116,618

Taste Skill

claudecodex

tasteskill 2.5.1: professional company websites at the figma.com and x.ai level, with one section per screen, real photographs, real product UI, effects kept for tech and gaming pages, and a real-browser checker and finish gate.

1 skill

Leonxlnx/taste-skill 114,391

context7

claudecodex

Up-to-date documentation lookup. Pull version-specific documentation and code examples directly from source repositories into your coding agent's context.

1 MCP server

upstash/context7 64,709

Maintain skill-scan?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins2 plugins