Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Get Started Free →

A5c AI/Security Scanning — measured AI agent skill | DecimalAI

a5c-ai/security-scanning

SkillScore5Maintained

AgentShield security audit with 5 scanning categories, 102 static analysis rules, and optional red-team simulation.

by a5c-ai

Links this skill to your agents and keeps it current with the author’s updates.

Automatic

Security & AppSec pack

decimalai skills pull a5c-ai-security-scanning

Get this skill — curl · raw file

curl -fsSL https://app.decimal.ai/s/a5c-ai-security-scanning/SKILL.md

Raw file: /s/a5c-ai-security-scanning/SKILL.md ↗ · machine-readable summary at /s/a5c-ai-security-scanning.json ↗

In productionGlobal

how this skill behaves on real traffic · last 30 days

No production data for this skill yet — usage numbers appear here once agents start running it.

Anonymized aggregate across every org using this skill — proof from real production use, not a demo.

Does this skill help? · Benchmark: with vs. withoutsign in to run this on your agents

22 test cases from the publisher’s eval.yaml · each run twice on gemini-3.6-flash — with the skill injected, then without · last run 9d ago

Yes — +5% lift+7% tokens0% turns5% of whole cases pass with skill (1/22)

Test case	Without → With	Effect	Δ tokens	Δ turns
case-02	✗→✓	▲ Improved	132%	0%
case-01	✗→✗	＝ Same ✗	18%	0%
case-03	✗→✗	＝ Same ✗	20%	0%
case-04	✗→✗	＝ Same ✗	-2%	0%
case-05	✗→✗	＝ Same ✗	26%	0%

Showing 5 of 22 cases

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 7/31/2026

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

a5c-ai / babysitter

library/methodologies/everything-claude-code/skills/security-scanning/SKILL.md

View on GitHub ↗

License MITImported 7/31/2026Version v1

Skill contents

SKILL.md

AWS access keys (AKIA pattern)
GitHub tokens (ghp_, gho_, ghs_, ghr_)
Generic API keys and bearer tokens
Database connection strings with credentials
Private keys (RSA, EC, SSH)
JWT secrets and signing keys
OAuth client secrets
Slack tokens and webhooks
Cloud provider credentials (GCP, Azure)

2. Permission Auditing

File system read/write scope
Network calls and protocols
Process execution (child_process)
File permissions (777, world-writable)
CORS and CSP headers
Docker privilege escalation

3. Hook Injection Analysis

Git hooks for command injection
npm lifecycle scripts (preinstall, postinstall)
Claude Code hooks for unsafe patterns
eval()/Function()/dynamic code execution
Unvalidated user input in shell commands

4. MCP Risk Profiling

Tool permission inventory
Data exposure risk mapping
Transport security (stdio vs SSE vs HTTP)
Prompt injection via tool descriptions
Rate limiting verification

5. Agent Config Review

Model settings integrity
Prompt injection resistance
Tool allowlist scoping
Output validation and sanitization
Information leakage in error messages

Optional: Red Team Simulation

Attack simulation against found vulnerabilities
Exploitability rating: trivial, moderate, difficult, theoretical
Blue-team defense recommendations

When to Use

Pre-deployment security review
New dependency introduction
Hook or plugin configuration changes
Agent or MCP server setup

Agents Used

security-reviewer (primary consumer)

Want to see if a5c-ai/security-scanning would activate on your phrasing? Try it before you install — no LLM call, no signup.

Other measured skills in the registry, with their headline benchmark lift.