Send a request

Cisco Skill Scanner

by Cisco AI Defense

Check agent skills before you install them

Inspects agent skills for prompt injection, data exfiltration and malicious code patterns before installation.

Open SourceTrust 100Some practice neededTerminal · Python
Get it via OROBO

Checked sourcegithub.com/cisco-ai-defense/skill-scannerMaker’s own licencechecked 11 hours agoGitHub lists a SHA-256 checksum for every release file.

Have it set up for you instead:Request setup by OROBOOr start with the AI Compass: a written assessment at a fixed price of €490 (businesses only).

How it runs for you

Simulation starting …

Illustration, not a real test run

What you get

What you get

  1. 01Looks for prompt injection in skill instructions
  2. 02Detects data exfiltration and malware patterns
  3. 03Free and open source (Apache 2.0)

For you if …

  • Users of Claude Code, Codex or Cursor
  • Marketplaces vetting skills

Pick something else if …

  • As sole proof that a skill is harmless

How to start

In three steps.

What you need
  • Python
  • The skill as a folder or file
  1. 1Get the repo from GitHub and install as the README says
  2. 2Point the scanner at the skill folder
  3. 3Read the findings; no findings does not mean no risk

Part of these packages

Cisco Skill Scanner works together with other software.

Use AI safely

Your team uses AI — with far less risk of data leaks or hijacked chatbots.

5 stepsone day for the basicsMedium

Safety check

7 of 7 checks passed

No known malicious patterns in the install instructionsactively maintainedMaker’s own licence

Trust 100
Who is behind it?
  • Taken by OROBO from the official source. The maker has not joined OROBO yet.
Is the code clean?
  • Source code publicly visible
  • Maker’s own licence
  • No known malicious patterns in the install instructions
Is it maintained?
  • Website reachable
  • Updated 9 days ago
Technical details & what we don’t check
  • Website loads fast
  • Website protection settings: 5 of 6 (website only, not the software)HSTS, CSP, nosniff, Frame-Schutz, Referrer-Policy

Claims about protection come from the maker. The trust score checks public signals, not effectiveness.

We automatically check origin, code patterns, licence, maintenance and reachability — again every day. We do not check whether the software fits your purpose, how it handles your data, or whether it works without errors. Last checked 11 hours ago. How OROBO checks

Alternatives for the same goal

Snyk Agent Scan (formerly Invariant MCP-Scan)Make it safe · Snyk (ex-Invariant Labs team)Scan installed MCP servers and skills for trapsOpen SourceTrust high, 100For developersDocker MCP GatewayMake it safe · DockerRun MCP servers sealed off in containersOpen SourceTrust high, 100For developersCisco MCP ScannerMake it safe · Cisco AI DefenseInspect MCP servers before you plug them inOpen SourceTrust high, 100For developerspromptfooMake it safe · Promptfoo (OpenAI)Test AI features like regular codeOpen SourceTrust high, 97For developersAktoMake it safe · AktoFind and test MCP servers and APIs in your companyOpen SourceTrust high, 97For developersgarakMake it safe · NVIDIAHave your language model attacked on purposeOpen SourceTrust high, 100For developersGuardrails AIMake it safe · Guardrails AI (Harvey)Check AI answers before they move onOpen SourceTrust high, 100For developersNeMo GuardrailsMake it safe · NVIDIAFirm guardrails for your chatbotOpen SourceTrust high, 100For developers

Goes well with

OllamaBuild it yourself · OllamaRun language models locally with one commandOpen SourceTrust high, 97Runs offlinepromptfooMake it safe · Promptfoo (OpenAI)Test AI features like regular codeOpen SourceTrust high, 97For developersLakera GuardMake it safe · Lakera (Check Point Software)Catch prompt attacks before your AI respondsFree versionTrust high, 100For businessesReality DefenderMake it safe · Reality Defender Inc.Detect deepfakes in voice, images and videoFree versionTrust high, 100Beginner-friendly

Facts

AreaMake it safe
PriceOpen Source
LicenceMaker’s own licence
Runs onTerminal, Python
Popular with developers★ 2,688 GitHub
Last updated26 Oct 2026
Sourcecisco-ai-defense/skill-scanner ↗
I am the maker