SKILL verified Apache-2.0 Self-run

Security Scan

Name: Security Scan
Availability: InStock
Author: stella

skill-stella-skillguard-security-scan · by stella

Run SkillGuard before installing third-party Agent Skills, with optional semantic review only when the user explicitly allows network/model use.

↗ Website ↗ Repository

— No reviews yet

0 installs

3 views

0.0% view→install

Install

$ agentstack add skill-stella-skillguard-security-scan

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

✓ Prompt-injection patterns
✓ Secret / credential exfiltration
✓ Dangerous shell & filesystem operations
✓ Untrusted network calls
✓ Known-malicious package signatures

What it can access

✓ Network access No
✓ Filesystem access No
✓ Shell / process execution No
✓ Environment & secrets No
✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Security Scan? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.

About

SkillGuard Security Scan

Use this skill before installing or enabling a third-party Agent Skill.

Default Static Scan

Run a deterministic local scan first:

skillguard scan  --preset strict --policy strict

Do not install the skill if the scan fails unless the user explicitly accepts the risk after reviewing the findings.

Semantic Review

Run semantic review only when the user explicitly approves sending the candidate skill content to a model provider:

skillguard scan  \
  --preset paranoid \
  --policy strict \
  --allow-network \
  --semantic \
  --semantic-provider openai

Semantic review requires provider credentials, normally OPENAI_API_KEY. For OpenAI-compatible local endpoints, use:

skillguard scan  \
  --preset paranoid \
  --policy strict \
  --allow-network \
  --semantic \
  --semantic-provider openai-compatible \
  --semantic-base-url http://localhost:11434/v1

Never include unrelated user documents, chat history, workspace secrets, or credentials in the scan target.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Author: stella
Source: stella/skillguard
License: Apache-2.0
Homepage: https://stll.app

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Write a review

Versions

v0.1.0 Imported from the upstream source.