No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by semgrep · Agent Tool · ★ 262
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is skills safe to install? View the security audit →
Agent Skills [Beta] A collection of skills for AI coding agents. Skills are packaged instructions and scripts that extend agent capabilities. This should be considered beta-level software; it's primarily generated by transforming open-source Semgrep rules into skill format. Skills follow the Agent Skills format. Installation Available Skills code-security Comprehensive code security guidelines from Semgrep Engineering covering OWASP Top 10, infrastructure security, and secure coding best practices across 15+ languages. Use when: Writing new code Reviewing code for security vulnerabilities Asking about secure coding practices Configuring cloud infrastructure (Terraform, Kubernetes, Docker) Categories covered: Memory Saf
| Stars | 262 |
| Forks | 28 |
| Language | JavaScript |
| Category | Agent Tool |
| Quality Score | 73.3546593553767/100 |
| Open Issues | 6 |
| Last Updated | 2026-07-28 |
| Created | 2026-01-15 |
| Platforms | claude-code, node |
| Est. Tokens | ~14k |
Looking for a skills alternative? If you're comparing skills with other agent tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
🚀 JoySafeter: An enterprise AI Agent Platform—Not just chatting. building、running、testing, and tracing autono
The Complete AI Development Toolkit for Claude Code. 106 skills, 36 agents, 171 hooks. Install `ork` for stabl
Security operations toolkit for AI coding agents. Give Claude Code 25+ skills to catch vulnerabilities, scan c
An IOS Simulator Skill for ClaudeCode. Use it to optimise Claude's ability to build, run and interact with you
AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions.
Scan MCP servers for potential threats & security findings.
Explore other popular agent tool tools:
skills is A collection of skills for AI coding agents from Semgrep. It is categorized as a Agent Tool with 262 GitHub stars.
skills is primarily written in JavaScript. It covers topics such as agents, claude-code, security.
You can find installation instructions and usage details in the skills GitHub repository at github.com/semgrep/skills. The project has 262 stars and 28 forks, indicating an active community.
The top alternatives to skills on Agent Skills Hub include JoySafeter, orchestkit, SecOpsAgentKit. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: