whaojie797-design/skill-sentry

README 摘要

skill-sentry Read a Skill before it reads your machine. 在让一个 Agent Skill 碰你的电脑之前，先读懂它。 skill-sentry is a local, static, explainable pre-install audit for Agent Skills. It scans a third-party Skill's SKILL.md , scripts, config, and manifest to produce a risk report — so you can decide whether to install it. It never executes the scanned Skill and never uploads anything. skill-sentry 是一个 本地、静态、可解释 的 Agent Skill 安装前审计工具。它扫描 第三方 Skill 的 SKILL.md 、脚本、配置与清单，生成风险报告——帮你判断要不要装。 它 不会执行被扫描的 Skill，也不会上传任何内容 。 What it checks / 检查什么 Domain Rules Catches Destructive DEST rm -rf / , wipe home, fork bomb, disk overwrite Network NET outbound requests, download-and-execute pipes ( curl … \ sh ) Secrets SECRET SSH dir, private keys, AWS creds, token patterns, env collection Obfuscation OBF Base64 decode, eval / exec , reflection Injection INJ "ignore previous instructions", "bypass safety", "don't tell the user" Persistence PERSIST shell startup files, cron, launch agents, systemd Filesystem FS writes into /etc , /System , personal dirs Domains DOMAIN every external host referenced (SBOM) Every hit reports file:line , a rule id , a reason, a confidence, and a level ( INFO / REVIEW / HIGH ). Heuristic …

分类