Check coding-agent skills and configuration.

Find known security risks in skills, project instructions, settings, hooks, and MCP configuration — without executing the submitted files.

Docs GitHub

14,913 skills scanned

View directory

Scan your repo

Public repos on GitHub, GitLab, Bitbucket · source deleted after scan

By scanning, you confirm you are authorized to submit this repository or archive and agree to the Terms and Privacy Policy. Static analysis can miss issues; do not submit secrets.

If this repository contains just one skill, either check works. Check the skill directly when you want only that skill's files.

Checking one skill? Check it directly →