Data

Tools

Indexes

Applications

Experiments

Summary

An open API service for producing an overview of a list of open source projects.

https://github.com/cisco-ai-defense/skill-scanner

agent agent-skills security

Score: 24.049968040300218

Last synced: about 4 hours ago
JSON representation

Repository metadata:

Security Scanner for Agent Skills

Owner metadata:

GitHub Events

Total
Last Year

Committers metadata

Last synced: 1 day ago

Total Commits: 152
Total Committers: 52
Avg Commits per committer: 2.923
Development Distribution Score (DDS): 0.605

Commits in past year: 152
Committers in past year: 52
Avg Commits per committer in past year: 2.923
Development Distribution Score (DDS) in past year: 0.605

Name Email Commits
Vineeth Sai Narajala v****l@c****m 60
ihabler i****r@c****m 18
Dmytro Vdovychynskyi c****y@p****m 4
Federico Roncallo f****o@t****m 4
Sense_wang 1****8 4
Adam Lin i****l@g****m 4
Ben Mares s****2@t****m 3
James Bassford j****d@g****m 3
Barry Yuan b****n@c****m 3
Yunseo Kim d****v@y****m 2
XuJian 2****o 2
Rohit Gollarahalli r****8@g****m 2
Rohan Isawe 1****s 2
Richard Tweed R****C 2
Paul B. p****t@g****m 2
Abhijoy Sarkar a****r@g****m 1
Adam Swanda d****s 1
Amy Chang c****y@c****m 1
Austin Shoecraft g****b@s****z 1
Colby Bryce Reeve 4****r 1
Dhruv D Jain d****v@i****m 1
Doug Butdorf 6****f 1
Harish h****n@c****m 1
Harsh Vardhan Singh s****1@g****m 1
Houman Azimi-Nejadi h****3@g****m 1
Ingo Muschenetz 1****o 1
pbuff07 1****7 1
nanookclaw n****k@a****o 1
mikemikimike 1****7@1****m 1
gyrospectre 7****e 1
and 22 more...

Issue and Pull Request metadata

Last synced: 1 day ago

Total issues: 26
Total pull requests: 59
Average time to close issues: 17 days
Average time to close pull requests: 3 days
Total issue authors: 19
Total pull request authors: 25
Average comments per issue: 0.54
Average comments per pull request: 2.15
Merged pull request: 44
Bot issues: 0
Bot pull requests: 0

Past year issues: 26
Past year pull requests: 59
Past year average time to close issues: 17 days
Past year average time to close pull requests: 3 days
Past year issue authors: 19
Past year pull request authors: 25
Past year average comments per issue: 0.54
Past year average comments per pull request: 2.15
Past year merged pull request: 44
Past year bot issues: 0
Past year bot pull requests: 0

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/cisco-ai-defense/skill-scanner

Top Issue Authors

  • chinskiy (6)
  • nedlir (2)
  • hnanda21 (2)
  • serkud (1)
  • eeee2345 (1)
  • maresb (1)
  • willdave865 (1)
  • 2002lcy0401 (1)
  • m1ngshum (1)
  • didier-durand (1)
  • davinbaker-agent (1)
  • SAXEM1997 (1)
  • houman44 (1)
  • adrienbesson-hub (1)
  • legard (1)

Top Pull Request Authors

  • vineethsai7 (17)
  • ihabler (11)
  • chinskiy (4)
  • jhbassford (3)
  • eeee2345 (2)
  • pcbeingused333 (2)
  • xujiantop-crypto (2)
  • barryqy (1)
  • xh123637 (1)
  • binyangzhu000-sudo (1)
  • snehalvartak (1)
  • wangzaiwang-hub (1)
  • stephanie-dave (1)
  • aiapienthusiast (1)
  • March-7 (1)

Top Issue Labels

  • bug (5)
  • enhancement (3)

Top Pull Request Labels

  • bug (1)
  • detection-impact-accepted (1)

Package metadata

proxy.golang.org: github.com/cisco-ai-defense/skill-scanner

pypi.org: cisco-ai-skill-scanner

Security scanner for Agent Skills packages - Detects prompt injection, data exfiltration, and malicious code

Dependencies

.github/workflows/integration-tests.yml actions
  • actions/checkout v4 composite
  • actions/setup-go v5 composite
  • actions/setup-python v5 composite
  • astral-sh/setup-uv v6.7.0 composite
tools/cel_runtime/go.sum go
  • cel.dev/cel-go v0.32.0
  • cel.dev/expr v0.25.1
  • github.com/antlr4-go/antlr/v4 v4.13.1
  • github.com/google/go-cmp v0.7.0
  • go.yaml.in/yaml/v3 v3.0.4
  • golang.org/x/exp v0.0.0-20240823005443-9b4947da3948
  • golang.org/x/text v0.22.0
  • google.golang.org/genproto/googleapis/api v0.0.0-20240826202546-f6391c0de4c7
  • google.golang.org/genproto/googleapis/rpc v0.0.0-20240826202546-f6391c0de4c7
  • google.golang.org/protobuf v1.36.10
  • gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405
.github/workflows/detection-pr-gates.yml actions
  • actions/checkout v4 composite
  • actions/setup-go v5 composite
  • actions/setup-python v5 composite
  • actions/upload-artifact v4 composite
  • astral-sh/setup-uv v6.7.0 composite
pyproject.toml pypi
  • anthropic >=0.50,<1
  • click >=8.3.3
  • confusable-homoglyphs >=3.3,<4
  • fastapi >=0.115,<1
  • httpx >=0.27,<1
  • litellm >=1.89.7,<2
  • magika >=1.0,<2
  • oletools >=0.60,<1
  • openai >=2.0,<3
  • pdfid >=1.1,<2
  • protobuf >=5.29,<7
  • pydantic >=2.10,<3
  • pyjwt >=2.15.0,<3
  • python-dotenv >=1.0,<2
  • python-frontmatter >=1.1,<2
  • python-multipart >=0.0.31,<0.1
  • pyyaml >=6.0,<7
  • rich >=14.0,<15
  • tabulate >=0.9,<1
  • textual >=7.0,<9
  • urllib3 >=2.8.0,<3
  • uvicorn [standard]>=0.34,<1
  • yara-x >=1.10,<2
.github/workflows/detection-impact.yml actions
  • actions/checkout v4 composite
  • actions/download-artifact v4 composite
  • actions/github-script v7 composite
  • actions/setup-go v5 composite
  • actions/setup-python v5 composite
  • actions/upload-artifact v4 composite
  • astral-sh/setup-uv v6.7.0 composite
.github/workflows/detection-release-evidence.yml actions
  • actions/checkout v4 composite
  • actions/download-artifact v4 composite
  • actions/setup-go v5 composite
  • actions/setup-python v5 composite
  • actions/upload-artifact v4 composite
  • astral-sh/setup-uv v6.7.0 composite
.github/workflows/detection-release-gates.yml actions
  • actions/checkout v4 composite
  • actions/download-artifact v4 composite
  • actions/setup-go v5 composite
  • actions/setup-python v5 composite
  • actions/upload-artifact v4 composite
  • astral-sh/setup-uv v6.7.0 composite
.github/workflows/docs-site.yml actions
  • actions/checkout v4 composite
  • actions/setup-python v5 composite
.github/workflows/update-homebrew.yml actions
  • actions/checkout v4 composite
  • actions/download-artifact v4 composite
  • actions/setup-go v5 composite
  • actions/upload-artifact v4 composite
  • astral-sh/setup-uv v6.7.0 composite
tools/cel_runtime/go.mod go
  • cel.dev/cel-go v0.32.0
  • cel.dev/expr v0.25.1
  • github.com/antlr4-go/antlr/v4 v4.13.1
  • go.yaml.in/yaml/v3 v3.0.4
  • golang.org/x/exp v0.0.0-20240823005443-9b4947da3948
  • google.golang.org/genproto/googleapis/api v0.0.0-20240826202546-f6391c0de4c7
  • google.golang.org/genproto/googleapis/rpc v0.0.0-20240826202546-f6391c0de4c7
  • google.golang.org/protobuf v1.36.10
.github/workflows/python-tests.yml actions
  • actions/checkout v4 composite
  • actions/setup-go v5 composite
  • actions/setup-python v5 composite
  • astral-sh/setup-uv v6.7.0 composite
  • codecov/codecov-action v4 composite
.github/workflows/release.yml actions
  • actions/attest-build-provenance 0f67c3f4856b2e3261c31976d6725780e5e4c373 composite
  • actions/attest-sbom c604332985a26aa8cf1bdc465b92731239ec6b9e composite
  • actions/checkout v4 composite
  • actions/download-artifact v4 composite
  • actions/setup-go v5 composite
  • actions/setup-python v5 composite
  • actions/upload-artifact v4 composite
  • astral-sh/setup-uv v6.7.0 composite
  • pypa/gh-action-pypi-publish release/v1 composite
  • softprops/action-gh-release v2 composite
.github/workflows/scan-skills.yml actions
  • actions/checkout v4 composite
  • actions/setup-python v5 composite
  • github/codeql-action/upload-sarif v4 composite
evals/skills/supply-chain-attack/unpinned-dependency/requirements.txt pypi
  • requests >=2.31
uv.lock pypi
  • 179 dependencies