whereismyai
Cisco Skill Scanner
Cisco Skill Scanner: Security scanner for AI Agent Skills that detects prompt injection and malicious code patterns.
Cisco Skill Scanner is a security detection tool for AI Agent Skills that identifies prompt injection, data exfiltration, and malicious code patterns. It combines pattern-based detection using YAML and YARA-X, AST and dataflow analysis, an optional LLM-as-a-judge, and a bounded CEL decision layer over typed detector facts. The tool supports OpenAI Codex Skills, Cursor Agent Skills, and non-standard formats such as Claude Code commands and flat markdown skill repositories. It provides multi-engine detection, measured presets, SARIF output for GitHub Code Scanning, and a pre-commit hook integration. Designed for developers and security teams, it helps surface risks in agent skills through static analysis, bytecode integrity checks, behavioral dataflow, and optional cloud-based scanning.
Cisco Skill Scanner at a glance
Key features
- Multi-engine detection using static analysis and behavioral dataflow
- Typed CEL decisions with official cel-go runtime
- Measured presets with published recall, false-positive rate, and F1
- CI/CD ready with SARIF output and reusable GitHub Actions workflow
- Pre-commit framework integration for scanning before every commit
- Extensible plugin architecture for custom analyzers
- Interactive wizard for selecting scan targets and policies
- Consensus mode for stable majority-agreed findings
Use it for
- Scan AI agent skills for prompt injection and data exfiltration
- Integrate security scanning into GitHub CI/CD pipelines
- Run pre-commit checks on skill repositories
- Evaluate agent skills using an optional LLM judge
Alternatives to Cisco Skill Scanner
- AgentGuard — Get a security and quality assessment of AI skills in seconds without an account.
- SkillTotal — Scans code locally without accounts, telemetry, API tokens or executing the files.
- Reverse Skill — Routes AI agents to exact security methodologies instead of guessing commands.
- Cybersecurity Skills — Provides structured cybersecurity workflows mapped to major security frameworks for AI agents.
- Security Audit Skill — Automated multi-stage security auditing with independent verification.
- Tech Leads Agent Skills — Extends AI coding agents with security-scanned, specialized workflows and tools.
- ARTEX — Runs autonomous multi-agent penetration testing with a dual-graph architecture.
- CodeScan Artex — It uses multiple parallel AI agents to read source code and verify vulnerabilities.
- SkillWire — Compare coding agent outputs with and without specific skills using local A/B tests.
- Skill Seekers — Converts 18 data sources into structured AI skills for 22 platforms.
- Microsoft Skills — Provides domain-specific knowledge to improve AI coding agent accuracy.
- .NET Skills — Curated .NET skills and custom agents for AI coding assistants.
All Cisco Skill Scanner alternatives