Skip to content

Add SkillTotal (static security scanner for AI components) #1844

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
pezhik wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Add SkillTotal (static security scanner for AI components) #1844

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 23 additions & 0 deletions data/tools/skilltotal.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
name: SkillTotal
categories:
- linter
tags:
- python
- javascript
- nodejs
- json
- ci
- security
license: Apache License 2.0
types:
- cli
source: 'https://github.com/pezhik/skilltotal'
homepage: 'https://www.skilltotal.ai'
description: >-
A free, offline static security scanner for AI components
(agent skills/plugins, MCP servers, npm & PyPI packages, git repos).
Deterministic regex + AST detection (no LLM, no account) with
evidence-anchored findings for supply-chain risk, dangerous
capabilities, prompt-injection surfaces, MCP tool poisoning and
exfiltration paths; maps to the OWASP Agentic Skills Top 10.
JSON and SARIF 2.1.0 output, with a GitHub Action and pre-commit hook.
Loading