skill-lint
Security scanner for agent skills — catches prompt injection before you install.
Dev ToolsOpen Source
skill-lint scans Claude Code and agent skills for prompt injection, obfuscation, credential exfiltration and supply-chain risk before you install a third-party skill.
Heuristics are drawn from the OWASP Agentic Skills Top 10 and Snyk's ToxicSkills research. Runs locally, no upload — point it at a skill directory or a repo and it reports what it found and why it matters.
MIT licensed.
agent-skillsdev-toolssecurityclaude-codeopen-source
Share this launch
Embed this badge
<a href="https://orangebot.ai/product/skill-lint-2" target="_blank" rel="noopener noreferrer"> <img src="https://orangebot.ai/api/badge/skill-lint-2.svg" alt="Featured on OrangeBot" width="200" height="54" /> </a>