cisco-ai-defense/skill-scanner

• hightopics#1

  Add more specific AI security topics

  原因：

  当前

  agent, agent-skills, security

  复制粘贴的修复

  复制

  agent, agent-skills, security, ai-security, llm-security, prompt-injection-detection, data-exfiltration-prevention, ai-agent-security-scanner

  待办完成忽略
• highreadme#2

  Add a 'Why Skill Scanner?' or 'How is this different?' section to the README

  原因：

  复制粘贴的修复

  复制

  ## Why Skill Scanner?
  Unlike general-purpose SAST tools, Skill Scanner is purpose-built for AI Agent Skills, understanding their unique attack surface including prompt injection, data exfiltration, and malicious code patterns specific to agent environments. It combines pattern-based detection, LLM-as-a-judge, and behavioral dataflow analysis for comprehensive coverage tailored to AI agents, going beyond what traditional code scanners or content moderation APIs can offer for this specialized domain.

  待办完成忽略
• mediumreadme#3

  Clarify the existing license in the README

  原因：

  复制粘贴的修复

  复制

  ## License
  This project's licensing terms are detailed in the [LICENSE](LICENSE) file. Please refer to that file for specific conditions and applicable licenses.

  待办完成忽略

本次扫描解析到的品类 GEO 通道：google/gemini-2.5-flash, deepseek/deepseek-v4-flash

• 品类问题

  How to secure AI agent skills from prompt injection and data exfiltration attacks?

  你：未被推荐
  AI 推荐顺序：

  1. Guardrails AI (guardrails-ai/guardrails)
  2. Microsoft Azure AI Content Safety
  3. Google Cloud DLP
  4. LangChain (langchain-ai/langchain)
  5. OpenAI Moderation API
  6. OWASP Top 10 for LLM Applications (OWASP/owasp-llm-top-10)
  7. Intel SGX
  8. AMD SEV
  9. Azure Confidential Computing

  AI 推荐了 9 个替代方案，却始终没点名 cisco-ai-defense/skill-scanner。这就是要补上的差距。

  查看 AI 完整回答
• 品类问题

  Looking for a security scanner to detect malicious patterns in my AI agent code.

  你：未被推荐
  AI 推荐顺序：

  1. Snyk Code
  2. GitHub Advanced Security (CodeQL)
  3. SonarQube (SonarSource/sonarqube)
  4. Checkmarx SAST
  5. Veracode Static Analysis
  6. Bandit (PyCQA/bandit)
  7. OWASP ZAP (zaproxy/zaproxy)

  AI 推荐了 7 个替代方案，却始终没点名 cisco-ai-defense/skill-scanner。这就是要补上的差距。

  查看 AI 完整回答

• Metadata completeness

  pass

• README presence

  pass

• Compared to common alternatives in this category, what is the core differentiator of cisco-ai-defense/skill-scanner?

  pass
  ✓AI 明确点名了 cisco-ai-defense/skill-scanner

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？

• If a team adopts cisco-ai-defense/skill-scanner in production, what risks or prerequisites should they evaluate first?

  pass
  ✓AI 明确点名了 cisco-ai-defense/skill-scanner

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？

• In one sentence, what problem does the repo cisco-ai-defense/skill-scanner solve, and who is the primary audience?

  pass
  ✓AI 明确点名了 cisco-ai-defense/skill-scanner

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？