skillhawk: Catch dangerous AI agent skills before they catch you

by Berserk-hub150 · MCP Server · ★ 70

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

How to install skillhawk

git clone https://github.com/Berserk-hub150/skillhawk.git

Taken from the project's README on GitHub.

Security audit verdict: SAFE · quality 70/100

None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

agent-skillsai-agentsclaude-codecodexmcpopen-sourcesecuritystatic-analysis

Quick Facts

Stars70
Forks53
LanguageJavaScript
CategoryMCP Server
LicenseMIT
Quality Score70/100
Open Issues76
Last Updated2026-11-05
Created2026-08-16
Platformsclaude-code, codex, mcp, node
Est. Tokens~15k

About skillhawk

SkillHawk Security scanner + hands-on lab for AI Agent Skills, and MCP configs Catch dangerous agent instructions before they touch your shell, files or credentials. 🧪 5-Minute AI Agent Security Challenge Can you repair an unsafe AI Agent Skill before SkillHawk catches it? Fork → edit in the browser → push → GitHub Actions grades you automatically.

Compatible Skills

These tools work well together with skillhawk for enhanced workflows:

  • sync-skill — semantic(0.32)+complementary+same_lang+similar_pop+shared_platform (61%)
  • agent-skills — semantic(0.32)+complementary+same_lang+similar_pop+shared_platform (61%)

skillhawk alternative? Top 6 similar tools

Looking for a skillhawk alternative? If you're comparing skillhawk with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • agent-designer by appautomaton · ⭐ 130

    Portable SKILLs workspace for Claude Code, Codex, and Gemini — issue-driven workflows and cross-agent collabor

  • mcp-linker by milisp · ⭐ 345

    Manage MCP servers, skills and plugins across Claude Code, Codex, Cursor and more. Built-in marketplace, one-c

  • orchestkit by yonatangross · ⭐ 300

    The Complete AI Development Toolkit for Claude Code. 115 skills, 36 agents, 161 hooks. Install `ork` for stabl

  • deepcontext-mcp by Wildcard-Official · ⭐ 278

    DeepContext is an MCP server that adds symbol-aware semantic search to Claude Code, Codex CLI, and other agent

  • claudepro-directory by JSONbored · ⭐ 217

    HeyClaude (formerly Claude Pro Directory) is a searchable collection of pre-built AI skills, agents, MCP serve

  • notion-mcp-server by awkoy · ⭐ 179

    Notion MCP server with token auth: connect Claude Code, Claude Desktop, Cursor, VS Code and Codex to Notion pa

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular JavaScript Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools