Skill Scanner
independent scanner · by Cisco AI Defense · open source ↗
About this scanner
Skill Scanner is an open-source security scanner for AI agent skills, published by Cisco's AI Defense team under the Apache-2.0 license.
It layers multiple detection engines — signature rules (YAML + YARA), behavioral dataflow analysis, and optional LLM analysis — to detect prompt injection, data exfiltration, and malicious code patterns, and reports a per-skill safe/unsafe result with a maximum finding severity.
What the verdicts mean
Every auditor on SkillMD reports on the same five-tier scale. For Skill Scanner:
PASS
Reported as safe — no findings
CAUTION
Findings up to MEDIUM severity
WARNING
Findings of HIGH severity
FAIL
Findings of CRITICAL severity
INCONCLUSIVE
Scan could not complete