claude-guard

Skill Scanner checks individual skills, directories, or repositories with static rules, shell-pipeline taint analysis, Python dataflow analysis, and optional LLM or cloud engines. It can produce SARIF or HTML reports and run in CI or pre-commit workflows with custom policies. Results are best effort: finding nothing does not certify a skill as safe, so human review remains necessary.

GlobalProtect-openconnect provides Linux users with CLI and graphical clients built around OpenConnect. It can connect to multiple portals or gateways and supports SSO, non-SSO login, FIDO2 devices such as YubiKey, and client certificates. The CLI is free and open source, while the GUI is a paid application with a seven-day trial after installation.

Electronegativity is a static analysis tool for Electron developers and security auditors. It parses AST and DOM structures in source directories, JavaScript, HTML, or ASAR packages to identify security-relevant configuration mistakes and implementation anti-patterns, with CSV or SARIF output available. Findings can require manual investigation by someone familiar with Electron security, and the open-source project is no longer actively maintained.

SkillWard triages Agent Skills in three stages: rule-based static analysis, LLM-assisted intent evaluation, and isolated Docker execution for unresolved cases. The runtime guard records evidence of suspicious network access, sensitive writes, credential risks, and other behavior. It supports single or batch CLI scans, with an optional web interface for reviewing results.