Back to directory
SecurityFrancoisChastel/skill-scanner
@french-castle/skill-scanner
Scan Agent Skills for prompt injection, hidden instructions, exfiltration, and remote code before Claude Code, Codex, OpenCode, Pi, or npx skills installs them. Standalone and offline by default; TypeSafe's jev is an optional second opinion.
Suggested install command
npx skills add FrancoisChastel/skill-scanner/@french-castle/skill-scannerAlways inspect the linked repository and skill instructions before running commands. Skills are instructions; permissions and execution still matter.
Compatibility
Agent support matrix
3 supported
| Agent | Status |
|---|---|
| Claude Code | Supported |
| OpenCode | Not listed |
| Cursor | Supported |
| MCP | Not listed |
| GitHub Copilot | Not listed |
| Windsurf |