enkryptai

Skill Sentinel — Security skill for Claude Code

Security community

A security scanner for Agent Skill packages.

How to install Skill Sentinel

This entry records only its repository, not the path inside it, so there is no exact command to give. Open enkryptai/skill-sentinel and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Skill Sentinel does

A security scanner for Agent Skill packages. Skill Sentinel uses multi-agent AI analysis to detect prompt injection, data exfiltration, command injection, malware, and other threats hiding in skill packages for Cursor, Claude Code, Codex, and OpenClaw.

Alternatives in Security

Security Guardian — Comprehensive security analysis for RTK CLI tool, focusing on command injection, shell escaping, hook security 11.9k ★
Skill Code Review — Expert multi-AI code review with inline PR comments — use for thorough quality and security analysis 2.8k ★
Promptmap — Security scanner for custom LLM apps 1.2k ★

README

Enkrypt AI Skill Sentinel

Agent Skills extend AI coding assistants with custom instructions and scripts — but they also create a new attack surface. A single malicious skill can steal credentials, inject hidden prompts, exfiltrate code, or execute arbitrary commands. Skill Sentinel catches these threats before they reach your agent.

Supported Platforms

Cursor

Claude Code

Codex

OpenClaw

and other agents

Key Features

🔍 Multi-Agent Security Pipeline

Specialized agents work together to analyze Skills from multiple angles — manifest inspection, file verification, cross-referencing, and threat correlation.

🦠 Built-in Malware Detection

Automatic VirusTotal integration scans binary files (executables, archives, PDFs) for known malware before any LLM analysis begins.

📄 No Truncation Limits

Reads complete file contents without arbitrary cutoffs — catching malicious instructions hidden deep in documentation where other scanners stop looking.