No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by Berserk-hub150 · MCP Server · ★ 62
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is skillhawk safe to install? View the security audit →
SkillHawk Security scanner + hands-on lab for AI Agent Skills, and MCP configs Catch dangerous agent instructions before they touch your shell, files or credentials. 🧪 5-Minute AI Agent Security Challenge Can you repair an unsafe AI Agent Skill before SkillHawk catches it? Fork → edit in the browser → push → GitHub Actions grades you automatically. 🍴 START THE CHALLENGE — FORK SKILLHAWK 10 levels · automatic progress · weekly bonus challenge · shareable Defender badge · Hall of Defenders No local setup is required for the challenge ladder. <img src="assets
| Stars | 62 |
| Forks | 23 |
| Language | JavaScript |
| Category | MCP Server |
| License | MIT |
| Quality Score | 69.834286718004/100 |
| Open Issues | 60 |
| Last Updated | 2026-09-20 |
| Created | 2026-08-16 |
| Platforms | claude-code, codex, mcp, node |
| Est. Tokens | ~15k |
These tools work well together with skillhawk for enhanced workflows:
Looking for a skillhawk alternative? If you're comparing skillhawk with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Portable SKILLs workspace for Claude Code, Codex, and Gemini — issue-driven workflows and cross-agent collabor
The Complete AI Development Toolkit for Claude Code. 106 skills, 36 agents, 171 hooks. Install `ork` for stabl
DeepContext is an MCP server that adds symbol-aware semantic search to Claude Code, Codex CLI, and other agent
HeyClaude (formerly Claude Pro Directory) is a searchable collection of pre-built AI skills, agents, MCP serve
Better 'AskUserQuestion' - A lightweight MCP server/OpenCode plugin/Agent Skills + CLI tool that allows your L
Roslyn-based MCP server giving AI agents deep semantic understanding of .NET/C# codebases — 67 tools for navig
Explore other popular mcp server tools:
skillhawk is Catch dangerous AI agent skills before they catch you. Zero-dependency security scanner for Agent Skills, SKILL.md and MCP configs.. It is categorized as a MCP Server with 62 GitHub stars.
skillhawk is primarily written in JavaScript. It covers topics such as agent-skills, ai-agents, claude-code.
You can find installation instructions and usage details in the skillhawk GitHub repository at github.com/Berserk-hub150/skillhawk. The project has 62 stars and 23 forks, indicating an active community.
skillhawk is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to skillhawk on Agent Skills Hub include agent-designer, orchestkit, deepcontext-mcp. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: