obielin

Skillguard — Security skill for Claude Code

Security community

Security scanner for AI agent skills.

How to install Skillguard

This entry records only its repository, not the path inside it, so there is no exact command to give. Open obielin/skillguard and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Skillguard does

Security scanner for AI agent skills. Detects prompt injection, data exfiltration, and malicious payloads before you install.

Alternatives in Security

Security Guardian — Comprehensive security analysis for RTK CLI tool, focusing on command injection, shell escaping, hook security 11.9k ★
Promptmap — Security scanner for custom LLM apps 1.2k ★
Query Token Audit — Audit token security to detect scams, honeypots, and malicious contracts across BSC, Base, Solana, and Ethereu 483 ★

README

skillguard

**Security scanner for AI agent skills. Detects prompt injection, data exfiltration, and malicious payloads before you install. Zero dependencies.**

[![Tests](https://img.shields.io/badge/Tests-75%20passing-brightgreen?style=flat-square)](tests/) [![PyPI](https://img.shields.io/pypi/v/skillguard?style=flat-square)](https://pypi.org/project/skillguard/) [![Dependencies](https://img.shields.io/badge/Dependencies-zero-brightgreen?style=flat-square)](pyproject.toml) [![Python](https://img.shields.io/badge/Python-3.10%2B-blue?style=flat-square)](pyproject.toml) [![License](https://img.shields.io/badge/License-MIT-green?style=flat-square)](LICENSE) [![LinkedIn](https://img.shields.io/badge/-Linda_Oraegbunam-blue?logo=linkedin&style=flat-square)](https://www.linkedin.com/in/linda-oraegbunam/)

The problem

In January 2026, the **ClawHavoc campaign** dropped 341 malicious skills into the Claude skill marketplace in 3 days. Snyk's **ToxicSkills audit** found that **13.4% of 3,984 skills** contain critical security issues — prompt injection payloads, data exfiltration code, and rug-pull remote execution. The OWASP Agentic Skills Top 10 lists skill supply-chain attacks as the #1 risk for AI agents.

There is no open-source scanner for this. Until now.

pip install skillguard
skillguard scan SKILL.md

CRITICAL  my_skill.md
  Risk score:  80/100
  Findings:    3

  [SG-011] Lethal Trifecta (Supply Chain Attack Pattern)
  Severity: CRITICAL
  Description:
    Prompt injection + network access + file system access detected
    together. This combination is the hallmark of ClawHavoc-style
    supply chain attack skills.
  Remediation:
    Immediately reject and report this skill.
  Lines: [4, 12, 19]

  [SG-001] Prompt Injection
  Severity: CRITICAL
  Description:
    The skill contains text that attempts to override the agent's
    system prompt. Primary technique used in ClawHavoc campaign.

  [SG-002] Data Exfiltration
  Severity: CRITICAL