Agent skill · practicalswan
agent-skillguard
Use before installing an agent skill or plugin. Scan local files for risky instructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret exposure; return file-and-line findings and remediation without running, uploading, or certifying the target.
What it needs
About 3k tokens when loaded.
What this skill does
Skill Risk Check Use this skill when the user asks whether an agent skill or plugin should be trusted, installed, reviewed, or admitted. Non-negotiable boundary Scanning is read-only. Never execute, source, import, install, or enable the target artifact during review. A clean report is not proof that an artifact is safe, and a finding is not proof of malicious intent. Workflow 1. Identify the exact local target and its provenance. 2. Run python <catalog-root>/agent-skillguard/scripts/skillguard.py scan <path> --format markdown before any installation step. Use the absolute catalog path when the host does not expand <catalog-root>. 3. Review every active finding at its exact file and line. 4. Separate confirmed behavior, ambiguous behavior, and false positives. 5. If a false positive is accepted, suppress only its exact fingerprint, rule ID, and rule version with a concrete reason. 6. Re-run the scan and report both active and suppressed counts. 7. Stop before installation or permission grants unless the user separately authorized them. 8. When evaluating the scanner itself, scan agent-skillguard/fixtures/positive (expected review findings) and agent-skillguard/fixtures/negative (expected clean result) with the bundled script, and inspect rules/non-coverage.json. The installed plugin package does not ship the upstream tools/verifyrulecorpus.py helper, so do not claim that helper ran; the two fixture scans are the supported local smoke test. Packaging Notes This catalog copy is intentionally self-contained: it includes the scanner, rule JSON, schemas, and public fixtures, but not the plugin's host metadata, examples, or large assets. The scanner resolves its rules relative to this skill directory, so invoke it through the bundled Python script rather than assuming a globally installed skillguard command. Exit codes 0: no active findings at or above the selected severity. 1: at least one active finding requires review. 2: the scan could not be completed reliably. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills practicalswan/agent-skillguard