felipeinf

SkillRx — Security skill for Claude Code

Security community

Security scanner for AI agent skills and plugins.

How to install SkillRx

This entry records only its repository, not the path inside it, so there is no exact command to give. Open felipeinf/skillRx and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What SkillRx does

Security scanner for AI agent skills and plugins.

Alternatives in Security

FastAPI Review — Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu 243.5k ★
Defense In Depth — Implement multi-layered testing and security best practices 98.1k ★
Google Workspace Alert Center — Manage security alerts 21.6k ★

README

skillrx

skillRx

Security scanner for AI agent **skills and plugins**. Reviews the code before you install it.

Usage

npx skillrx owner/repo

That's it. skillrx clones the repo, analyzes it, and gives you a verdict: **TRUSTED**, **CAUTION**, **RISKY**, or **MALICIOUS**.

What you can scan

Claude Code skills and plugins
Codex skills and plugins
Skills for 40+ other agents (Cursor, Aider, Continue.dev, Vercel AI SDK, OpenAI Assistants, MCP, etc.)

If it ships as a skill or plugin, skillrx reads it.

Two ways to scan

**Full repository** — point skillrx at a repo (or local folder). It scans the whole tree you give it (respecting filters and limits).

**Single skill in a monorepo** — for big skills collections (for example `anthropics/skills`), use `--skill ` so only `skills/` is fetched with a sparse checkout instead of cloning everything.

npx skillrx anthropics/skills --skill frontend-design

Full repository Single skill (--skill)

What we look for

Area	What it detects
Prompt injection	Attempts to hijack the agent's role or coerce its tools
Shadow features	What the README promises vs what the code actually does
**