agent-skill-scanner
agent-skill-scanner is an open-source CLI tool that scans agent skill files for security vulnerabilities, including prompt injection, capability escalation, and data exfiltration. It applies 22 security rules to help AI developers and security researchers identify and mitigate risks in LLM agent skills. The tool is MIT licensed and suitable for anyone building or auditing AI agent systems.
Open SourceMITCLI
Overview
10 featuresagent-skill-scanner sits in PulseGate's AI category. It focuses on detecting and mitigating security vulnerabilities in agent skill files for AI and LLM-based systems. agent-skill-scanner is an open-source project aimed at AI security researchers and developers. The project is open source (MIT). agent-skill-scanner is available on the command line.
It is developed by rexcoleman, and it first shipped in 2026. The project is developed in the open on GitHub with 16 commits in the last 90 days. Among its 10 catalogued features are prompt injection detection, capability escalation scan, and data exfiltration scan.
Summary written by a language model from the project’s public pages.
- Prompt injection detection
- Capability escalation scan
- Data exfiltration scan
- Encoded payload detection
- Composition risk analysis
- MIT licensed
- Command-line interface
- Security ruleset
- Skill file scanning
- Open source
Tags
prompt-injectionllm-securityagent-safetyskill-file-scannersecurity-audit
AI capabilities
Text
Weights: Open
Built with & integrations
Runs on
CLI
Trust & compliance
License
MIT
Verified signals
Indexing history
1What PulseGate has recorded for this listing
Frequently asked questions about agent-skill-scanner
- What does agent-skill-scanner do?
- Agent-skill-scanner focuses on detecting and mitigating security vulnerabilities in agent skill files for AI and LLM-based systems. It is catalogued under AI on PulseGate.
- Who should use agent-skill-scanner?
- agent-skill-scanner is an open-source project built for AI security researchers and developers.
- Is agent-skill-scanner free?
- Yes — agent-skill-scanner is open source under the MIT license and free to use.
- What platforms does agent-skill-scanner run on?
- agent-skill-scanner runs on the command line.
- Is agent-skill-scanner still active?
- The GitHub repository shows 16 commits in the last 90 days.
- What projects are similar to agent-skill-scanner?
- Similar projects tracked by PulseGate include cisco-ai-skill-scanner, SkillScan, and agent-skill-infra.cisco-ai-skill-scannerSkillScanagent-skill-infra
- Who develops agent-skill-scanner?
- agent-skill-scanner is developed by rexcoleman.
- How long has agent-skill-scanner been around?
- agent-skill-scanner first shipped in 2026.
Similar projects
Closest matches by what these projects do