coder

Registry Scanner — Security skill for Claude Code

Security community

Periodic, GitHub-Actions-as-SaaS security scanner for agent skills declared in the Coder registry catalogue.

How to install Registry Scanner

This entry records only its repository, not the path inside it, so there is no exact command to give. Open coder/registry-scanner and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Registry Scanner does

Periodic, GitHub-Actions-as-SaaS security scanner for agent skills declared in the Coder registry catalogue. Runs SkillSpector and ClamAV every 6h, publishes verdicts as Releases and GitHub Pages.

Alternatives in Security

Skill Scanner — Security Scanner for Agent Skills 2.5k ★
Mcp-scan (Invariant Labs) — MCP security scanner with proxy mode for real-time scanning without infrastructure changes 1.9k ★
Promptmap — Security scanner for custom LLM apps 1.2k ★

README

coder-skill-scanner

Periodic, GitHub-Actions-as-SaaS security scanner for agent skills declared in the [Coder registry](https://github.com/coder/registry) catalogue.

Every 6 hours, the scheduled workflow in this repo:

Enumerates every skill in coder/registry (both the in-tree .agents/skills/ format and the future external-sources format).
Shallow-clones each source repo.
Runs NVIDIA SkillSpector over the upstream content. The scheduled scan runs SkillSpector's LLM semantic pass when the workflow's LLM credential secret is configured, and falls back to --no-llm static-only mode otherwise.
Builds a per-skill verdict (clean, suspicious, malicious, unknown) from risk_score plus the thresholds in config.yaml.
Builds the React SPA in site/ and ships it together with latest.json, schema.json, and a rolling history of prior snapshots to GitHub Pages. Also publishes a versioned GitHub Release for archival.

The public site is the same React app that registry-server hosts at `registry.coder.com`, scoped down to scan results. Same Vite, Tailwind, Radix, react-router-dom, and tanstack-query stack.

The registry site reads the public report through a small proxy endpoint in `coder/registry-server` (separate PR) and shows a per-skill badge. The registry's deploys are not gated on the scan result.

Reading the latest report

Stable URLs, no auth required:

Public site: https://scanner.registry.coder.com/
Per-skill detail: https://scanner.registry.coder.com/skills//
Run history: https://scanner.registry.coder.com/history
CDN-cached JSON: https://scanner.registry.coder.com/latest.json
Tagged release: https://github.com/coder/coder-skill-scanner/releases/latest/download/latest.json
Schema: https://scanner.registry.coder.com/schema.json (v1)
Per-scan history (JSON): https://scanner.registry.coder.com/history/index.json

The custo