How do I install the Mayguard skill?

Run npx skillmds@latest add johnalbertini14-glitch/mayguard in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Mayguard safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: CAUTION, Skill Scanner: PASS. Capability flags: executes scripts. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Mayguard?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Mayguard free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Mayguard?

johnalbertini14-glitch (@johnalbertini14-glitch) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Mayguard by johnalbertini14-glitch — Agent Skill

Name: Mayguard
Rating: 4.5 (4 reviews)
Author: johnalbertini14-glitch

Mayguard

A security auditor for agent skills. Scans skill directories for malicious patterns (credential theft, suspicious network calls, destructive commands) and provides a safety score. Use before installing unknown skills.

File contents

MayGuard: Security Auditor 🛡️

MayGuard is a specialized tool for auditing the security of other agent skills. It performs deep static analysis to detect common attack vectors and malicious code patterns.

🌟 Key Features

Static Analysis: Scans source code for hardcoded credentials, suspicious URLs, and dangerous commands.
Risk Scoring: Assigns a security status (SAFE, CAUTION, SUSPICIOUS, DANGEROUS) based on findings.
Pre-Installation Check: Allows users to verify a skill's integrity before moving it to the active skills/ directory.

🛠️ How to Use

1. Auditing a Skill

To audit a downloaded skill directory, run the provided script:

python3 scripts/audit.py <path_to_skill_directory>

2. Output Report

The script will output a summary including:

Status: The overall safety rating.
Risk Score: Numerical representation of detected threats.
Findings: Specific files and patterns that triggered warnings.

3. JSON Output

For integration with other tools, use the --json flag:

python3 scripts/audit.py <path> --json

🛡️ Security Patterns Monitored

ClawGuard maintains a database of threat patterns in references/threat_patterns.json, including:

Credential Theft: Access to .env, SSH keys, or config files.
Suspicious Networking: Use of webhooks, tunnels (ngrok, localtunnel), or outbound POST requests.
Destructive Commands: rm -rf /, disk formatting, or privilege escalation.
Obfuscation: Use of eval, exec, or base64 decoding to hide logic.

🤝 Community Responsibility

If ClawGuard flags a skill as DANGEROUS, please report the skill and its author on Moltbook to help protect the wider community. 🦞

Built with ❤️ by maymun & Balkan.

---name: mayguarddescription: A security auditor for agent skills. Scans skill directories for malicious patterns (credential theft, suspicious network calls, destructive commands) and provides a safety score. Use before installing unknown skills.--- # MayGuard: Security Auditor 🛡️ MayGuard is a specialized tool for auditing the security of other agent skills. It performs deep static analysis to detect common attack vectors and malicious code patterns. ## 🌟 Key Features - **Static Analysis:** Scans source code for hardcoded credentials, suspicious URLs, and dangerous commands. - **Risk Scoring:** Assigns a security status (SAFE, CAUTION, SUSPICIOUS, DANGEROUS) based on findings. - **Pre-Installation Check:** Allows users to verify a skill's integrity before moving it to the active `skills/` directory. ## 🛠️ How to Use ### 1. Auditing a Skill To audit a downloaded skill directory, run the provided script: ```bash python3 scripts/audit.py <path_to_skill_directory> ``` ### 2. Output Report The script will output a summary including: - **Status:** The overall safety rating. - **Risk Score:** Numerical representation of detected threats. - **Findings:** Specific files and patterns that triggered warnings. ### 3. JSON Output For integration with other tools, use the `--json` flag: ```bash python3 scripts/audit.py <path> --json ``` ## 🛡️ Security Patterns Monitored ClawGuard maintains a database of threat patterns in `references/threat_patterns.json`, including: - **Credential Theft:** Access to `.env`, SSH keys, or config files. - **Suspicious Networking:** Use of webhooks, tunnels (ngrok, localtunnel), or outbound POST requests. - **Destructive Commands:** `rm -rf /`, disk formatting, or privilege escalation. - **Obfuscation:** Use of `eval`, `exec`, or base64 decoding to hide logic. ## 🤝 Community Responsibility If ClawGuard flags a skill as **DANGEROUS**, please report the skill and its author on Moltbook to help protect the wider community. 🦞 --- *Built with ❤️ by maymun & Balkan.*

Frequently asked questions