safe-skill-install

Supply chain security scanning for Claude Code skill installations. Wraps Cisco's skill-scanner to vet skills before installation.

This skill uses a two-layer architecture that separates security decisions from user interaction:

Why this matters: The wrapper script makes the SAFE/CAUTION/UNSAFE/FAILED classification using bash conditionals — not LLM interpretation. Prompt injection in skill content cannot influence the security decision because the decision is made by compiled logic that never processes skill content as instructions.

透過供應鏈安全掃描進行安全技能安裝。包裝思科技能掃描儀 安裝前審查技能。支援 GitHub 儲存庫、skills.sh (npx)、Claude 市場 插件和本地路徑。預設可配置靜態和行為分析的掃描深度。 使用 GitHub 檔案下載來避免 git 執行風險，並提供強化的 git 複製回退。 安全決策是由確定性包裝腳本而不是 LLM 代理程式做出的。 來源：swannysec/robot-tools。