Profile My skills Saved Collections Edit profile Submit a skill

Scan Repo

Scan a repository or directory for security threats using Sigil. Use when auditing AI agent code, reviewing cloned repositories, checking dependencies, or analyzing suspicious packages. Auto-invoke when users clone repos or install packages from untrusted sources. Trigger phrases (English): 'is this safe to install', 'scan this skill', 'vet this MCP server', 'check this package before installing', 'is this repo safe', 'audit this code'. Trigger phrases (Chinese): '安全扫描', '这个插件安全吗', '这个技能安全吗', '扫描一下', '安装前检查'.

nomarj cb33865 1.2 KB Updated
AI & ML

File contents

Security Scan with Sigil

Scan the target repository/directory for malicious patterns:

  1. Run Sigil scan on the target path
  2. Review detected threats (install hooks, eval/exec, network exfil, credentials)
  3. Show risk score and verdict
  4. Recommend approve/reject based on findings

Usage:

sigil scan <path>

Output interpretation:

  • CLEAN (score 0): Safe to use
  • LOW RISK (1-9): Review findings
  • MEDIUM RISK (10-24): Manual review required
  • HIGH RISK (25-49): Block unless override
  • CRITICAL (50+): Block, no override

Present findings clearly and recommend next steps.

nomarj/sigil/tree/main/plugins/claude-code/skills/scan-repo commit cb338659da

Browse category

Frequently asked questions

npx skillmds@latest add nomarj/scan-repo