felipeinf

SkillRx

Name: SkillRx
Author: felipeinf

Security community

SOURCE https://github.com/felipeinf/skillRx

Description

Security scanner for AI agent skills and plugins

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

skillrx

skillRx

Security scanner for AI agent **skills and plugins**. Reviews the code before you install it.

Usage

npx skillrx owner/repo

That's it. skillrx clones the repo, analyzes it, and gives you a verdict: **TRUSTED**, **CAUTION**, **RISKY**, or **MALICIOUS**.

What you can scan

Claude Code skills and plugins
Codex skills and plugins
Skills for 40+ other agents (Cursor, Aider, Continue.dev, Vercel AI SDK, OpenAI Assistants, MCP, etc.)

If it ships as a skill or plugin, skillrx reads it.

Two ways to scan

**Full repository** — point skillrx at a repo (or local folder). It scans the whole tree you give it (respecting filters and limits).

**Single skill in a monorepo** — for big skills collections (for example `anthropics/skills`), use `--skill ` so only `skills/` is fetched with a sparse checkout instead of cloning everything.

npx skillrx anthropics/skills --skill frontend-design

Full repository Single skill (--skill)

What we look for

Area	What it detects
Prompt injection	Attempts to hijack the agent's role or coerce its tools
Shadow features	What the README promises vs what the code actually does
**