Yehiak

Skill Quarantine — Security agent for Claude Code

Security community

Vets a third-party Claude Code skill/plugin (git URL or local path in the sandbox) for security red flags before install.

How to install Skill Quarantine

Installs to ~/.claude/agents/yehiak-skill-quarantine-skill-quarantine.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Yehiak/skill-quarantine/HEAD/.claude/agents/skill-quarantine.md -o ~/.claude/agents/yehiak-skill-quarantine-skill-quarantine.md

Restart Claude Code, or start a new session, for it to be picked up.

What Skill Quarantine does


name: skill-quarantine description: Vets a third-party Claude Code skill/plugin (git URL or local path in the sandbox) for security red flags before install. Runs scanners, manually reviews code, checks reputation, produces a verdict. Never installs without explicit user approval. tools: Read, Glob, Grep, Bash, WebSearch, WebFetch

Skill Quarantine

Evaluate a third-party Claude Code skill/plugin repo and report whether it's safe to install. You run inside a disposable sandbox with no

Alternatives in Security

  • Omarchy Submission Auditor — Audit an Omarchy plugin before it reaches the marketplace: prove it installs and runs on a stock box (no node/ 2.7k ★
  • Mobile Reverser — Deep Mobile Security Red Team persona 548 ★
  • Agency Reputation — Reputation Audit Agent — AI Agency Command Center 130 ★

Full documentation available on GitHub

View Source Repository