cisco-ai-defense/skill-scanner

• highreadme#1

  Reposition README H1 and opening paragraph to clarify 'AI Agent Skills'

  原因：

  当前

  # Skill Scanner
  ...
  A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns.

  复制粘贴的修复

  复制

  # Skill Scanner: Security for AI Agent Skills
  A best-effort security scanner specifically designed for **AI Agent Skills** (e.g., OpenAI Codex Skills, Cursor Agent Skills). It detects prompt injection, data exfiltration, and malicious code patterns, differentiating itself from general code analysis tools by focusing on the unique security challenges of AI agents.

  待办完成忽略
• mediumreadme#2

  Add explicit license clarification to README

  原因：

  复制粘贴的修复

  复制

  Add a section or line in the README, e.g., 'This project is licensed under [Specific License Name(s) from the LICENSE file]. See the [LICENSE file](LICENSE) for details.' (Replace bracketed text with the actual license name(s) from your LICENSE file).

  待办完成忽略
• mediumtopics#3

  Expand GitHub topics with specific AI security terms

  原因：

  当前

  agent, agent-skills, security

  复制粘贴的修复

  复制

  agent, agent-skills, security, prompt-injection, data-exfiltration, ai-security, llm-security

  待办完成忽略

本次扫描解析到的品类 GEO 通道：google/gemini-2.5-flash, deepseek/deepseek-v4-flash

• 品类问题

  How can I secure my AI agent skills from prompt injection and data exfiltration attacks?

  你：未被推荐
  AI 推荐顺序：

  1. Guardrails AI (guardrails-ai/guardrails)
  2. Microsoft Azure AI Content Safety
  3. Google Cloud DLP
  4. OpenAI Moderation API
  5. LangChain (langchain-ai/langchain)
  6. OWASP Top 10 for LLM Applications
  7. Semantic Kernel (microsoft/semantic-kernel)
  8. Intel SGX
  9. AMD SEV

  AI 推荐了 9 个替代方案，却始终没点名 cisco-ai-defense/skill-scanner。这就是要补上的差距。

  查看 AI 完整回答
• 品类问题

  What tools detect malicious code patterns and data exfiltration in AI agent applications?

  你：未被推荐
  AI 推荐顺序：

  1. Snyk Code
  2. Checkmarx SAST (CxSAST)
  3. OWASP ZAP (Zed Attack Proxy)
  4. PortSwigger Burp Suite Enterprise Edition
  5. Palo Alto Networks Prisma Cloud
  6. Splunk Enterprise Security
  7. Elastic Security
  8. Deepfence ThreatMapper
  9. Deepfence ThreatStryker

  AI 推荐了 9 个替代方案，却始终没点名 cisco-ai-defense/skill-scanner。这就是要补上的差距。

  查看 AI 完整回答

• Metadata completeness

  pass

• README presence

  pass

• Compared to common alternatives in this category, what is the core differentiator of cisco-ai-defense/skill-scanner?

  pass
  ⚠AI 未点名 cisco-ai-defense/skill-scanner —— 很可能在说另一个项目

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？

• If a team adopts cisco-ai-defense/skill-scanner in production, what risks or prerequisites should they evaluate first?

  pass
  ✓AI 明确点名了 cisco-ai-defense/skill-scanner

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？

• In one sentence, what problem does the repo cisco-ai-defense/skill-scanner solve, and who is the primary audience?

  pass
  ✓AI 明确点名了 cisco-ai-defense/skill-scanner

  AI 的回答可能信誓旦旦却是错的。请按事实核对：技术栈、目标人群、差异化点是不是和你实际的对得上？