← All skills
defendr
80 / 100 · Low risk
Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.
By lev-os/agents (GitHub) · coding · 27 stars · scanned at commit 201a805
[WHAT] 4-layer security scanner for untrusted code: static analysis, malware/CVE scanning, Docker sandbox, agentic review.
[HOW] Orchestrates rg patterns, ClamAV, pip-audit, osv-scanner, semgrep, Docker strace, and LLM code review.
[WHEN] Before running cloned repos, installing pip/npm packages, intake of external code, pre-commit on untrusted PRs, workshop evaluation.
[WHY] Agents clone and execute code from the internet. One malicious setup.py and your machine is owned.
Triggers: "security s…
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 15 places.
Show 12 more
- skills-db/security/defendr/SKILL.md, line 75
rg -n '['"'"'"](?:sk-|ak-|AKIA|ghp_|gho_|github_pat_)[a-zA-Z0-9]{20,}['"'"'"]' TARGET_DIR - skills-db/security/defendr/SKILL.md, line 88
rg -i -n 'ignore\s+(all\s+)?previous\s+instructions|you\s+are\s+now\s+a|system\s*:\s*you\s+are' TARGET_DIR - skills-db/security/defendr/SKILL.md, line 104
brew install clamav - skills-db/security/defendr/SKILL.md, line 119
pip install pip-audit - skills-db/security/defendr/SKILL.md, line 132
brew install osv-scanner - skills-db/security/defendr/SKILL.md, line 142
pip install semgrep - skills-db/security/defendr/SKILL.md, line 151
command -v clamscan && echo "ClamAV: ready" || echo "ClamAV: MISSING — brew install clamav && freshclam" - skills-db/security/defendr/SKILL.md, line 167
docker run -d \ - skills-db/security/defendr/SKILL.md, line 186
docker exec defendr-sandbox bash -c ' - skills-db/security/defendr/SKILL.md, line 211
docker stop defendr-sandbox && docker rm defendr-sandbox - skills-db/security/defendr/SKILL.md, line 254
TARGET=poc/osint/username-search/sherlock - skills-db/security/defendr/SKILL.md, line 267
docker exec defendr-sandbox bash -c 'cd /scan && pip install --no-cache-dir -r requirements.txt 2>&1 | tail -5'
Downloads and installs other software
The author does not mention this.
Found in 17 places.
Show 14 more
- skills-db/security/defendr/SKILL.md, line 142
pip install semgrep - skills-db/security/defendr/SKILL.md, line 151
command -v clamscan && echo "ClamAV: ready" || echo "ClamAV: MISSING — brew install clamav && freshclam" - skills-db/security/defendr/SKILL.md, line 152
command -v pip-audit && echo "pip-audit: ready" || echo "pip-audit: MISSING — pip install pip-audit" - skills-db/security/defendr/SKILL.md, line 153
command -v osv-scanner && echo "osv-scanner: ready" || echo "osv-scanner: MISSING — brew install osv-scanner" - skills-db/security/defendr/SKILL.md, line 154
command -v semgrep && echo "semgrep: ready" || echo "semgrep: MISSING — pip install semgrep" - skills-db/security/defendr/SKILL.md, line 187
apt-get update -qq && apt-get install -y -qq strace >/dev/null 2>&1 - skills-db/security/defendr/SKILL.md, line 191
pip install --no-cache-dir -r requirements.txt 2>&1 - skills-db/security/defendr/SKILL.md, line 194
pip install --no-cache-dir . 2>&1 - skills-db/security/defendr/SKILL.md, line 267
docker exec defendr-sandbox bash -c 'cd /scan && pip install --no-cache-dir -r requirements.txt 2>&1 | tail -5' - skills-db/security/defendr/SKILL.md, line 277
| `rg: command not found` | `brew install ripgrep` | - skills-db/security/defendr/SKILL.md, line 278
| `clamscan: command not found` | `brew install clamav && freshclam` | - skills-db/security/defendr/SKILL.md, line 279
| `pip-audit: command not found` | `pip install pip-audit` | - skills-db/security/defendr/SKILL.md, line 280
| `osv-scanner: command not found` | `brew install osv-scanner` | - skills-db/security/defendr/SKILL.md, line 281
| `docker: command not found` | Install Docker Desktop or `brew install colima && colima start` |
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'defendr' ] || [ -L ~/.agents/skills/'defendr' ]; then echo 'A skill folder named defendr already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/lev-os/agents' "$d" && git -C "$d" checkout --quiet '201a80515e1dc58addfda3cd9978907de2c944a6' -- 'skills-db/security/defendr' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills-db/security/defendr' ~/.agents/skills/'defendr' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'defendr' ~/.claude/skills/'defendr' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for lev-os/agents shows the score of its lowest-scoring skill.
[](https://zalavijaysinh.github.io/skilltrust/repos/lev-os/agents/)
Score history
| Date | Version | Score |
|---|
| 2026-11-07 | 201a805 | 80 |