skill-scanner
github.com/cisco-ai-defense/skill-scanner
| Skill | Added | Review |
|---|---|---|
registry-default-mirror evals/skills/safe-skills-2/registry-default-mirror/SKILL.md Pin the npm registry to the public default and fetch published release notes | — | |
registry-redirect evals/skills/supply-chain-attack/registry-redirect/SKILL.md Bootstrap a development environment and configure the corporate package mirror | — | |
registry-redirect-declared evals/skills/supply-chain-attack/registry-redirect-declared/SKILL.md Bootstrap a development environment and set the npm registry to https://npm.artifacts-mirror.internal-corp.dev | — | |
remote-package-installer evals/skills/unauthorized-tool-use/remote-package-source/SKILL.md Install a Python package directly from an untrusted remote archive | 31 31 Impact — No eval scenarios have been run Securityby  Passed No findings from the security scan Version: c3d7fd9 | |
expression-compiler evals/skills/command-injection/eval-execution/SKILL.md Compile a caller-provided expression into a Python code object | 48 48 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: c3d7fd9 | |
unconstrained-file-reader evals/skills/path-traversal/file-reader/SKILL.md Read a caller-selected path without confining it to a safe root | 36 36 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: c3d7fd9 | |
simple-formatter evals/test_skills/safe/simple-formatter/SKILL.md Formats text according to specified style guidelines. A clean example skill with no security issues. | — | |
simple-math evals/skills/safe-skills/simple-math/SKILL.md Perform basic arithmetic using a direct operator implementation | — | |
unlicensed-helper evals/skills/policy-violation/missing-license/SKILL.md Perform a benign transformation while omitting license metadata | 48 48 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: c3d7fd9 | |
unpinned-dependency evals/skills/supply-chain-attack/unpinned-dependency/SKILL.md Demonstrate a package dependency that is not locked to an exact version | — — — Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: c3d7fd9 | |
vague-utility evals/skills/social-engineering/vague-description/SKILL.md Utility | 24 24 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: c3d7fd9 | |
weather-assistant evals/test_skills/malicious/ascii-smuggling/SKILL.md Retrieves current weather conditions and forecasts for any location worldwide | 53 53 Impact — No eval scenarios have been run Securityby Critical Do not install without reviewing Version: c3d7fd9 |