NOMARJ

Sigil — Security skill for Claude Code

Security community

Automated security auditing CLI for AI agent code — quarantine-first workflow for repos, packages, and agent tooling.

How to install Sigil

This entry records only its repository, not the path inside it, so there is no exact command to give. Open NOMARJ/sigil and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Sigil does

Automated security auditing CLI for AI agent code — quarantine-first workflow for repos, packages, and agent tooling.

Alternatives in Security

Security Guardian — Comprehensive security analysis for RTK CLI tool, focusing on command injection, shell escaping, hook security 11.9k ★
Anthropic Cybersecurity Skills — 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Work 3.8k ★
Clawsec — Security skill suite with drift detection, automated audits, and skill integrity verification 798 ★

README

SIGIL

Automated security auditing for AI agent code

A protective mark for every line of code.
by NOMARK

Sigil scans repositories, packages, MCP servers, skills, and agent tooling for malicious patterns **before they reach your working environment**. Nothing runs until it's been scanned, scored, and explicitly approved.

The AI tooling ecosystem moves fast. Developers clone repos from tutorials, install MCP servers with 12 GitHub stars, and pull agent skills from Discord — all of which get direct access to API keys, databases, and cloud credentials. Traditional dependency scanners catch known CVEs but miss the real threat: **intentionally malicious code** designed to exfiltrate credentials, establish backdoors, or execute arbitrary commands via install hooks.

Sigil fills this gap with a **quarantine-first approach**.

Quick Install

**Install via Script (Current):**

# Clone the repository
git clone https://github.com/NOMARJ/sigil.git
cd sigil

# Run the installer — downloads the prebuilt release binary for your
# platform and wires up the Claude Code integration by default
# (opt out with --no-integrations)
./install.sh

# Optional: add gclone/safepip/safenpm shell aliases
./install.sh --with-aliases

**Coming Soon:**

Homebrew: brew install nomarj/tap/sigil
npm (macOS/Linux): npm install -g @nomarj/sigil
curl installer: curl -fsSLO https://www.sigilsec.ai/install.sh && sh install.sh
Docker: docker pull nomark/sigil:1.2.1