domains / families / agent-tooling / aig-skill-scanner

aig-skill-scanner

separate

Scan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis — no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more. Triggers on: `这个 skill 安全吗`, `skill 安全扫描`, `检查 skill 安全`, `audit skill`, `scan skill`, `check skill safety`, `analyze skill`, `inspect skill`, `verify skill`, `skill security`, `skill supply chain`. Do NOT trigger for general agent usage, full system health checks, project debugging, or normal development.

When to use

• scan agent skill security
• audit specific skill file
• full-platform skill scan
• check skill safety
• analyze skill vulnerabilities
• verify skill supply chain

When not to use

• general agent usage
• full system health checks
• project debugging
• normal development

Skill page

Source