Skillhawk — Security skill for Claude Code
Catch dangerous AI agent skills before they catch you.
How to install Skillhawk
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open Berserk-hub150/skillhawk and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Skillhawk does
Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.
Alternatives in Security
- FastAPI Review — Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu 243.5k ★
- Mcp-scan (Invariant Labs) — MCP security scanner with proxy mode for real-time scanning without infrastructure changes 1.9k ★
- Trail Of Bits Claude-code-config — Opinionated production defaults from a top security firm: sandboxing, permissions, hooks, skills, MCP server c 1.6k ★
README
SkillHawk
Security scanner + hands-on lab for AI Agent Skills, `SKILL.md` and MCP configs
**Catch dangerous agent instructions before they touch your shell, files or credentials.**
[](https://github.com/Berserk-hub150/skillhawk/actions/workflows/ci.yml) [](https://github.com/Berserk-hub150/skillhawk/releases/latest)   [](https://github.com/Berserk-hub150/skillhawk/issues?q=is%3Aissue%20state%3Aopen%20label%3A%22good%20first%20issue%22)
🧪 5-Minute AI Agent Security Challenge
Can you repair an unsafe AI Agent Skill before SkillHawk catches it?
**Fork → edit in the browser → push → GitHub Actions grades you automatically.**
**[🍴 START THE CHALLENGE — FORK SKILLHAWK](https://github.com/Berserk-hub150/skillhawk/fork)**
**10 levels · automatic progress · weekly bonus challenge · shareable Defender badge · Hall of Defenders**
No local setup is required for the challenge ladder.
20-second flow: Fork → enable Actions → fix Level 1 → commit → watch your progress update. Click the demo to start your fork.
⭐ **[Star SkillHawk](https://github.com/Berserk-hub150/skillhawk)** · 🛡️ **[Read the Security Lab](lab/README.md)**
🎓 Teaching AI Security?
**[Use SkillHawk in your class, club, CTF or
Related Skills
Agentseal
Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply cha
Rolecraft
The security-first skill manager for AI agents — every install runs a security scan. Manage skills & MCP serve
Agentconfig Doctor
MCP security scanner & config linter for AI coding agents. Finds leaked secrets, risky commands, broad permiss
IntentProbe
Activation-probe security scanner for AI agent tooling. Reads a model's internal activations to detect poisone
Skilldoctor
A linter + security scanner for AI-agent skill files — validate Claude Code SKILL.md / AGENTS.md / subagent fr
Claude Skill Antivirus
Security scanner for Claude Code Skills — 9 engines detect malicious patterns, data exfiltration, dangerous op
Related Agents
Opentofu Ops Expert
Senior DevOps / OpenTofu expert. Use proactively for IaC authoring/review: validate syntax/modules/plans, enfo
Regression Guard
Proactive regression scanner that checks code changes against documented bug patterns. Use before commits, PRs
Sf Security Engineer
Security Engineer of the Software Factory cell. Use to run SAST/dependency/secret scans, verify zero-trust sec
