elliottwaves-20
- 1 skill
- 0 followers
- 17 hours ago last updated
- ▌ Agent Guard · elliottwaves-20 bundleScan AI agent skills, plugins, and MCP servers for malicious code BEFORE installation — catches prompt injection, credential theft, data exfiltration, and backdoors. Skills and the static MCP source scan use NVIDIA SkillSpector (static patterns + taint tracking + YARA + live OSV.dev CVE lookup + LLM semantic analysis, which runs by default through the user's own claude / codex / gemini CLI login — no API key — or any hosted provider with a key); the optional live MCP runtime check uses cisco-ai-mcp-scanner with separate MCP_SCANNER_LLM_* settings and any LiteLLM-supported provider. Skills follow the open SKILL.md standard (agentskills.io) and MCP is an open protocol, so one scan covers every agent: repos are downloaded as commit-pinned ZIP snapshots (never git clone before a verdict), and the exact scanned commit is installed via the bundled universal installer into Claude Code, Claude Desktop, Codex, Antigravity/Gemini, Hermes, and OpenClaw at once — or a chosen subset via --tools. Scan once, install everywh