skill-scanner

GlobalProtect-openconnect provides Linux users with CLI and graphical clients built around OpenConnect. It can connect to multiple portals or gateways and supports SSO, non-SSO login, FIDO2 devices such as YubiKey, and client certificates. The CLI is free and open source, while the GUI is a paid application with a seven-day trial after installation.

Electronegativity is a static analysis tool for Electron developers and security auditors. It parses AST and DOM structures in source directories, JavaScript, HTML, or ASAR packages to identify security-relevant configuration mistakes and implementation anti-patterns, with CSV or SARIF output available. Findings can require manual investigation by someone familiar with Electron security, and the open-source project is no longer actively maintained.

SkillWard triages Agent Skills in three stages: rule-based static analysis, LLM-assisted intent evaluation, and isolated Docker execution for unresolved cases. The runtime guard records evidence of suspicious network access, sensitive writes, credential risks, and other behavior. It supports single or batch CLI scans, with an optional web interface for reviewing results.

Place the scanner between untrusted content, model output, and tool execution, or wrap a line-delimited stdio MCP server with its proxy. It detects prompt injection, credential disclosure, exfiltration, and destructive actions before forwarding a call, redacts secrets, and returns structured reasons for enforcement. The scanner makes no network calls and ships as a Rust CLI with Node and Python wrappers.