● Официальный
cisco-ai-defense
⚡ Сразу
Skill Scanner
автор cisco-ai-defense · cisco-ai-defense/skill-scanner
Security Scanner for Agent Skills — prompt injection, data exfiltration, malicious code detection.
Skill Scanner is a Claude skill / skill pack maintained by cisco-ai-defense. Security Scanner for Agent Skills — prompt injection, data exfiltration, malicious code detection. See README for installation and configuration: https://github.com/cisco-ai-defense/skill-scanner
Зачем использовать
Ключевые функции
- Security Scanner for Agent Skills — prompt injection, data exfiltration, malicious code detection.
- Language: Python
- 2010+ GitHub stars at verification time
- Official project
Живое демо
Как выглядит на практике
skill-scanner.replay
▶ готово
Сценарии использования
Реальные сценарии: Skill Scanner
Когда использовать: See repo README for canonical use cases.
Предварительные требования
- Repo cloned or package installed — See https://github.com/cisco-ai-defense/skill-scanner
Поток
-
Install
Install Skill Scanner per README.✓ Скопировано
→ Tool/skill registered with client
-
Configure
Provide credentials/config as instructed.✓ Скопировано
→ Successful auth/init
-
Use
Run a sample task with Skill Scanner.✓ Скопировано
→ Expected output
Итог: You can drive the documented workflow end-to-end.
Подводные камни
- Skipping README — Read the repo README and CHANGELOG before shipping to prod.
Стоимость и лимиты
Во что обходится
- Квота API
- None of its own; bounded by upstream provider quotas if any
- Токенов на вызов
- Depends on usage
- Деньги
- Open source — check repo LICENSE
- Совет
- Review upstream API costs (if any) before automating.
Безопасность
Права, секреты, радиус поражения
Минимальные скоупы: Whatever the upstream provider requires
Хранение учётных данных: Env vars or local config — never commit secrets
Исходящий трафик: Forwards data per its README
Никогда не давайте: Full admin to untrusted prompts
- Project moves fast — pin a version in production.
Устранение неполадок
Частые ошибки и исправления
Auth fails
Verify credentials and required scopes match README.
Проверить: Re-read repo README auth section.
Tool not found by client
Ensure MCP client config points to correct command/path.
Проверить: Restart the client after editing config.