{"full_name":"francoischastel/skill-scanner","owner":"francoischastel","name":"skill-scanner","url":"https://github.com/FrancoisChastel/skill-scanner","description":"Scan Agent Skills for prompt injection, hidden instructions, exfiltration, and remote code before Claude Code, Codex, OpenCode, Pi, or npx skills installs them. Standalone and offline by default; TypeSafe's jev is an optional second opinion.","description_zh":null,"homepage":null,"topics":["models","security","server"],"tag_pages":["models","security","server"],"language":"plugin","license":"MIT","avatar":"https://github.com/FrancoisChastel.png","created_at":"2026-09-30T19:26:33.804Z","pushed_at":"2026-10-01T02:20:05.364Z","metrics":{"stars":3,"downloads30d":null,"downloads_month":null},"source_repo":"FrancoisChastel/skill-scanner","npm_id":"@french-castle/skill-scanner","verification":{"status":"skipped","level":"install","run_url":null},"approval":"pending","capabilities":{"findings":["child-process:package/dist/cli.js","network-call:package/dist/index-5qvegk9z.js","credential-read:package/dist/index-5qvegk9z.js","child-process:package/dist/index-5qvegk9z.js","network-call:package/dist/index-kz9zrwkf.js","base64-blob:package/dist/index-kz9zrwkf.js","credential-read:package/dist/index-kz9zrwkf.js","child-process:package/dist/index-kz9zrwkf.js","child-process:package/dist/index-vn47pw6n.js","child-process:package/dist/adapters/pi.js","lifecycle-script:package/package.json","network-call:package/dist/runtime/opencode-plugin.mjs","base64-blob:package/dist/runtime/opencode-plugin.mjs","credential-read:package/dist/runtime/opencode-plugin.mjs","child-process:package/dist/runtime/opencode-plugin.mjs","network-call:package/dist/runtime/pi-extension.mjs","base64-blob:package/dist/runtime/pi-extension.mjs","credential-read:package/dist/runtime/pi-extension.mjs","child-process:package/dist/runtime/pi-extension.mjs","network-call:package/dist/runtime/skill-scanner.mjs","base64-blob:package/dist/runtime/skill-scanner.mjs","credential-read:package/dist/runtime/skill-scanner.mjs","child-process:package/dist/runtime/skill-scanner.mjs","child-process:package/dist/analyzers/common.d.ts","credential-read:package/dist/rules/lists.d.ts"],"red_flags":["credential-read:package/dist/index-5qvegk9z.js","credential-read:package/dist/index-kz9zrwkf.js","lifecycle-script:package/package.json","credential-read:package/dist/runtime/opencode-plugin.mjs","credential-read:package/dist/runtime/pi-extension.mjs","credential-read:package/dist/runtime/skill-scanner.mjs","credential-read:package/dist/rules/lists.d.ts"]},"type":"plugin","contains":["plugin","skill"],"deprecated":false,"deprecated_message":null,"maintainers":["french-castle"],"growth":{"day":{"stars":0,"downloads30d":0,"base_day":"2026-11-12"}},"history":{"dates":["2026-11-12","2026-11-13"],"stars":[3,3],"downloads30d":[0,0],"downloads_month":[null,null]},"boards":{},"same_owner":[{"full_name":"francoischastel/jev-code","name":"jev-code","boards":{"new":69}}],"latest_release":{"name":"0.3.0","tag":"0.3.0","published_at":"2026-10-01T02:20:05.364Z","body":null,"url":"https://www.npmjs.com/package/@french-castle/skill-scanner/v/0.3.0"},"readme":false,"readme_zh":false,"news":[],"stale":false,"snapshot_at":"2026-11-12T16:43:02Z","history_start":"2026-11-12"}