Results for “script-injection”
11 skills
getsentry skill-scanner
Scans agent skills for security issues including prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks.
845 · bundle
bankrbot aeon-skill-security-scan
Audit installed SKILL.md files and companion scripts for shell injection, secret exfiltration, path traversal, prompt-override payloads, destructive commands, and obfuscation. Integrates with Bankr Safety Scores and produces delta reports against prior scans.
1.2k · bundle
github github-actions-hardening
Reviews and hardens GitHub Actions workflows against injection, privilege escalation, supply-chain, and token-scoping risks that pattern matchers miss.
36.2k · bundle
More results
inference-sh video-prompting-guide
Learn best practices for writing effective AI video generation prompts, covering shot types, camera movements, lighting, style keywords, and model-specific tips for Veo, Seedance, Wan, Grok, and others.
584
mukul975 detecting-indirect-prompt-injection
Detect and defend against prompt injection hidden in documents, web pages, and images consumed by an agent.
24.6k · bundle
inference-sh ai-content-pipeline
Build multi-step AI content creation pipelines combining image, video, audio, and text using the inference.sh CLI.
584
shenxingy equip
Equipment manager for Claude Code projects — inventory local skills/agents/scripts, audit external upstream repos (red-flag + prompt-injection screening), and sync selectively after user approval. Absorbs container-layout skill repos AND single-skill-at-root repos (e.g. a company design-system repo). Project-agnostic.
8 · bundle
vvieira010-pixel think-aloud-script-generator
Script a teacher think-aloud demonstrating expert reasoning processes for a specific task. Use when modelling problem-solving, writing, reading comprehension, or analytical processes.
0
comeonoliver videocut
Generates and burns subtitles into videos: extracts audio, transcribes via Volcano Engine, corrects errors, reviews, and burns subtitles with ffmpeg.
61
seb1n skill-supply-chain-audit
Audit agent skills, plugins, prompts, manifests, scripts, dependencies, and bundled assets for provenance, prompt-injection, permission, execution, exfiltration, persistence, and update risk. Use when evaluating a third-party skill before installing, enabling, updating, publishing, or distributing it; reviewing an untrusted SKILL.md, agent configuration, MCP integration, archive, or repository; comparing a package with a known-good version; or investigating unexpected tool, network, credential, or filesystem behavior.
159 · bundle
dylanckawalec skill-security-auditor
Security audit and vulnerability scanner for AI agent skills before installation. Use when: (1) evaluating a skill from an untrusted source, (2) auditing a skill directory or git repo URL for malicious code, (3) pre-install security gate for Claude Code plugins, OpenClaw skills, or Codex skills, (4) scanning Python scripts for dangerous patterns like os.system, eval, subprocess, network exfiltration, (5) detecting prompt injection in SKILL.md files, (6) checking dependency supply chain risks, (7) verifying file system access stays within skill boundaries. Triggers: "audit this skill", "is this skill safe", "scan skill for security", "check skill before install", "skill security check", "skill vulnerability scan".
3 · bundle