How do I install the Isnad Scan skill?

Run npx skillmds@latest add dvcrn/isnad-scan in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Isnad Scan safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: CAUTION, Skill Scanner: PASS. Capability flags: makes network calls, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Isnad Scan?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Isnad Scan free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Isnad Scan?

dvcrn (@dvcrn) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Isnad Scan by dvcrn — Agent Skill

Name: Isnad Scan
Rating: 4.2 (5 reviews)
Author: dvcrn

Isnad Scan

Scan AI agent skills for security vulnerabilities — detects code injection, prompt injection, credential exfiltration, supply chain attacks, and 69+ threat patterns. Use when installing new skills, auditing existing ones, reviewing untrusted code, or validating packages before publishing.

dvcrn Updated Sep 8, 2026 32 repo stars

File contents

isnad-scan — Security Scanner for AI Agent Skills

Scan any skill, package, or directory for security threats before installing or running it.

Quick Scan

isnad-scan <path>

Scans a directory and reports findings by severity (CRITICAL, HIGH, MEDIUM, LOW).

Options

isnad-scan <path> --cve          # Also check dependencies for known CVEs (via OSV.dev)
isnad-scan <path> -v             # Verbose output (show matched lines)
isnad-scan <path> --json         # Machine-readable JSON output
isnad-scan <path> --cve -v       # Full audit: CVEs + verbose findings

What It Detects (69+ patterns)

Code Injection — shell execution, eval, exec, subprocess, os.system, dynamic imports Prompt Injection — role override attempts, instruction hijacking, jailbreak patterns Credential Exfiltration — env var harvesting, keychain access, token theft, file reads of sensitive paths Network Threats — reverse shells, DNS exfiltration, unauthorized outbound connections, webhook data leaks Filesystem Attacks — path traversal, symlink attacks, /etc/passwd reads, SSH key access Supply Chain — typosquatting detection, minified JS analysis, binary file scanning, hidden files Crypto Risks — weak algorithms, hardcoded keys, wallet seed extraction

When to Use

Before installing a new skill — scan the skill directory first
Auditing existing skills — periodic security review
Reviewing PRs/contributions — catch malicious code in submissions
Pre-publish validation — ensure your own skills are clean before sharing
CI/CD integration — isnad-scan . --json for automated checks

Interpreting Results

🔴 CRITICAL  — Immediate threat. Do not install/run.
🟠 HIGH      — Likely malicious or dangerous. Review carefully.
🟡 MEDIUM    — Suspicious pattern. May be legitimate, verify intent.
🔵 LOW       — Informational. Common in legitimate code but worth noting.

Examples

Scan a ClawHub skill before installing:

isnad-scan ./skills/some-new-skill/

Full audit with CVE checking:

isnad-scan ./skills/some-new-skill/ --cve -v

JSON output for automation:

isnad-scan . --json | python3 -c "import sys,json; d=json.load(sys.stdin); print(f'{d[\"summary\"][\"critical\"]} critical, {d[\"summary\"][\"high\"]} high')"

Python API

from isnad_scan import scan_directory

results = scan_directory("/path/to/skill")
for finding in results.findings:
    print(f"[{finding.severity}] {finding.category}: {finding.description}")
    print(f"  File: {finding.file}:{finding.line}")

About ISNAD

ISNAD (إسناد) means "chain of transmission" — a method for verifying the authenticity of transmitted knowledge. isnad-scan is the security layer of the ISNAD Protocol, bringing trust verification to the AI agent skill ecosystem.

PyPI: pip install isnad-scan GitHub: counterspec/isnad Protocol: isnad.md

---name: isnad-scandescription: Scan AI agent skills for security vulnerabilities — detects code injection, prompt injection, credential exfiltration, supply chain attacks, and 69+ threat patterns. Use when installing new skills, auditing existing ones, reviewing untrusted code, or validating packages before publishing.---# isnad-scan — Security Scanner for AI Agent SkillsScan any skill, package, or directory for security threats before installing or running it.## Quick Scan```bashisnad-scan <path>```Scans a directory and reports findings by severity (CRITICAL, HIGH, MEDIUM, LOW).## Options```bashisnad-scan <path> --cve # Also check dependencies for known CVEs (via OSV.dev)isnad-scan <path> -v # Verbose output (show matched lines)isnad-scan <path> --json # Machine-readable JSON outputisnad-scan <path> --cve -v # Full audit: CVEs + verbose findings```## What It Detects (69+ patterns)**Code Injection** — shell execution, eval, exec, subprocess, os.system, dynamic imports**Prompt Injection** — role override attempts, instruction hijacking, jailbreak patterns**Credential Exfiltration** — env var harvesting, keychain access, token theft, file reads of sensitive paths**Network Threats** — reverse shells, DNS exfiltration, unauthorized outbound connections, webhook data leaks**Filesystem Attacks** — path traversal, symlink attacks, /etc/passwd reads, SSH key access**Supply Chain** — typosquatting detection, minified JS analysis, binary file scanning, hidden files**Crypto Risks** — weak algorithms, hardcoded keys, wallet seed extraction## When to Use1. **Before installing a new skill** — scan the skill directory first2. **Auditing existing skills** — periodic security review3. **Reviewing PRs/contributions** — catch malicious code in submissions4. **Pre-publish validation** — ensure your own skills are clean before sharing5. **CI/CD integration** — `isnad-scan . --json` for automated checks## Interpreting Results```🔴 CRITICAL — Immediate threat. Do not install/run.🟠 HIGH — Likely malicious or dangerous. Review carefully.🟡 MEDIUM — Suspicious pattern. May be legitimate, verify intent.🔵 LOW — Informational. Common in legitimate code but worth noting.```## ExamplesScan a ClawHub skill before installing:```bashisnad-scan ./skills/some-new-skill/```Full audit with CVE checking:```bashisnad-scan ./skills/some-new-skill/ --cve -v```JSON output for automation:```bashisnad-scan . --json | python3 -c "import sys,json; d=json.load(sys.stdin); print(f'{d[\"summary\"][\"critical\"]} critical, {d[\"summary\"][\"high\"]} high')"```## Python API```pythonfrom isnad_scan import scan_directoryresults = scan_directory("/path/to/skill")for finding in results.findings: print(f"[{finding.severity}] {finding.category}: {finding.description}") print(f" File: {finding.file}:{finding.line}")```## About ISNADISNAD (إسناد) means "chain of transmission" — a method for verifying the authenticity of transmitted knowledge. isnad-scan is the security layer of the [ISNAD Protocol](https://isnad.md), bringing trust verification to the AI agent skill ecosystem.**PyPI:** `pip install isnad-scan`**GitHub:** [counterspec/isnad](https://github.com/counterspec/isnad)**Protocol:** [isnad.md](https://isnad.md)

Frequently asked questions