skill-security-check SKILL.md skillA
skill-security-check from renky1025/agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add renky1025/agent-skills/skill-security-check@git:20260925.32ce6c0Pins git:20260925.32ce6c0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- renky1025/agent-skills
- Path
skill-security-check/SKILL.md- Versions recorded
- 4
- Latest version
- git:20260925.32ce6c0, committed Sep 25, 2026
- First version recorded
- Mar 25, 2026
- Size
- 8,032 bytes
- Repository stars
- 11
- License
- MIT
Skill 安装前的静态安全检查：对目标 skill 目录执行 11 项风险扫描（数据外泄、凭证访问、文件系统越界、敏感身份文件访问、动态代码执行、权限提升、持久化机制、运行时安装、代码混淆、进程侦察、浏览器会话访问），输出风险等级 / 最终评级 / 置信度报告并给出安装建议。支持 JavaScript/TypeScript、Python、Rust、Java、Go、C/C++、Ruby、PHP、Shell、PowerShell、Perl。必须在安装或更新任何第三方、社区或来源不明的 skill 之前使用此 skill 做全面安全审查。触发词：安全检查、安全审查、skill 安全、安装前检查、检查这个 skill 安全吗、有没有风险、第三方 skill 审查、security check、security audit、skill safety、is this skill safe、malicious skill。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Skill 安装前安全检查 (Multi-Language) ## Purpose 在安装一个 skill 之前，把它当作不可信代码做只读静态审查，产出一份带风险等级、最终评级和 置信度的 Markdown 报告，并给出「可以安装 / 需用户确认 / 不建议安装」的明确建议。它回答的是 "这个 skill 会不会外泄数据、越权、驻留或混淆代码"，不是"这个 skill 好不好用"。 **支持语言**: JavaScript/TypeScript, Python, Rust, Java, Go, C/C++, Ruby, PHP, Shell, PowerShell, Perl ## When to Use - 安装来自 GitHub、npm、PyPI、Crates.io 或其他源的第三方 skill。 - 安装社区贡献的 skill。 - 更新已安装的 skill 到新版本。 - 用户对某个 skill 的安全性有疑问，或要求"检查一下这个 skill"。 - 触发词：安全检查、安全审查、安装前检查、skill 安全、security check、security audit、 is this skill safe。 ## When NOT to Use - **代码质量 / 重构审查**（不涉及不可信来源）-> 交给 `claude-simplify` 或 `clean-code`。 - **自己正在编写、且完全可信的 skill** -> 无需安装前审查；如需自查，只跑工具即可。 - **运行时防护 / 入侵检测 / 沙箱** -> 本 skill 是安装前的一次性静态审查，不是运行时安全产品。 - **非 skill 的普通依赖审计**（如 `npm audit` 场景）-> 用对应生态的工具。 - **要求执行或"试跑"目标代码来验证** -> 本 skill 只做只读静态分析，拒绝执行被检查代码。 ## Workflow 1. **获取 skill 文件**：本地路径直接读取；远程链接先下载到临时目录再扫描。 2. **优先跑工具**：`node <skill>/scripts/security-check.js <skill-path>`。工具对目标目录执行 11 项静态扫描并写出报告。 3. **人工复核**：按 `references/checklist.md` 逐项确认；工具覆盖不到或结果可疑时，用 `references/grep-patterns.md` 的 grep 定位具体代码位置。 4. **判定等级**：按 `references/report-format.md` 汇总为风险等级 / 最终评级 / 置信度。 …
Read the whole file at its exact version.
How to install
mdr add renky1025/agent-skills/skill-security-check@sha256:ea2810b6cfebfdfaThe line at the top of this page pins the label git:20260925.32ce6c0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_lc3a2sp7pty2mfw2)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Mar 25, 2026 and Sep 25, 2026, about one every 61 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260925.32ce6c0 latest | 2026-09-25 | 32ce6c0 | 8,032 B | A | view · diff |
| git:20260830.2c099b8 | 2026-08-30 | 2c099b8 | 12,646 B | A | view · diff |
| git:20260825.fd539ff | 2026-08-25 | fd539ff | 12,201 B | A | view · diff |
| git:20260325.3a99911 | 2026-03-25 | 3a99911 | 11,540 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (8032 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
renky1025/agent-skills · 11 stars · license MIT · pushed 2026-10-10 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_lc3a2sp7pty2mfw2 GET https://markdownregistry.com/api/v1/resolve?ref=renky1025/agent-skills/skill-security-check GET https://markdownregistry.com/api/v1/blob/ea2810b6cfebfdfa8f0b7c69e1c7456428612582b434abc24f3e374dfc5c00a8
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.