GlobalProtect-openconnect

Skill Scanner checks individual skills, directories, or repositories with static rules, shell-pipeline taint analysis, Python dataflow analysis, and optional LLM or cloud engines. It can produce SARIF or HTML reports and run in CI or pre-commit workflows with custom policies. Results are best effort: finding nothing does not certify a skill as safe, so human review remains necessary.

Electronegativity is a static analysis tool for Electron developers and security auditors. It parses AST and DOM structures in source directories, JavaScript, HTML, or ASAR packages to identify security-relevant configuration mistakes and implementation anti-patterns, with CSV or SARIF output available. Findings can require manual investigation by someone familiar with Electron security, and the open-source project is no longer actively maintained.

SkillWard triages Agent Skills in three stages: rule-based static analysis, LLM-assisted intent evaluation, and isolated Docker execution for unresolved cases. The runtime guard records evidence of suspicious network access, sensitive writes, credential risks, and other behavior. It supports single or batch CLI scans, with an optional web interface for reviewing results.

Place the scanner between untrusted content, model output, and tool execution, or wrap a line-delimited stdio MCP server with its proxy. It detects prompt injection, credential disclosure, exfiltration, and destructive actions before forwarding a call, redacts secrets, and returns structured reasons for enforcement. The scanner makes no network calls and ships as a Rust CLI with Node and Python wrappers.