Plugin directory / Security / skill-sentry
skill-sentry
Unverified
0Stars
SecurityCategory
GitHubSource
What it does
Static, local, explainable pre-install security audit for Agent Skills. Scans SKILL.md/scripts/config for destructive commands, hidden network calls, secret reads, obfuscation, prompt injection, persistence. CLI + 36 fixtures + GitHub Actions.
Our take
Unverified — not yet install-tested; try it in your own environment.
Unverified — not yet install-tested; try it in your own environment.
“Verified” means our CI ran dsh plugin add in a clean profile and it booted — not a security audit and not an endorsement of third-party code.
Install
🧩 Let your agent install it (recommended)
Install the catalog once, then ask DeepSeek Harness to find and install this plugin.
dsh plugin add dshbase-catalogWeb profile:
dsh plugin --profile web add github:whaojie797-design/skill-sentry