Audit every
Agent Skill
One command scans every skill installed in your project — for vulnerabilities, supply-chain risk, and policy drift. Results in seconds, aligned with the OWASP Agentic Skills Top 10.
Zero install. Zero config. Just run it.
Auto-detects every skill · Scans against OWASP AST-10 · Exits with code 1 on policy violation
Three steps.
Seconds each.
AgentSec is a single binary with zero runtime dependencies. It runs locally, never phones home, and produces deterministic audit artifacts you can diff, sign, and replay.
Discover
Crawls .skill/, skill.md files, and platform manifests across your project. No config, no flags — it finds every installed skill.
Audit
Runs each skill through 10 OWASP categories: malicious prose injection, over-permissioned scopes, supply-chain drift, weak isolation, and more.
Report
Text for humans, JSON for scripts, SARIF for IDEs, HTML for stakeholders. Gate CI with the exit code — zero special flags required.
The 10 ways agent skills fail.
AgentSec scans for each of them, every run. Click a category to read the spec.
Malicious Skills
Skills that look legitimate but ship hidden payloads — credential stealers, backdoors, prompt injection buried in prose.
Skills run with the agent's full permissions. One bad install can leak keys, SSH, wallets, and shell access.
agentsec --verbose | grep AST-01OWASP AST-01 →One scan.
Four formats.
Humans read text. CI reads JSON. IDEs consume SARIF. Stakeholders open HTML. AgentSec emits any of them with --format.
Loading audit-report.txt…Pick a preset. Or write your own.
Every audit runs against a policy. Four presets ship built-in, and you can define custom gates in .agentsecrc.
--policy default--policy strict--policy permissive--policy owasp-top-10Audit skills.
Trust agents.
Start with npx agentsec. No install, no config, no flags.
Questions about
skill security?
Whether you're building a skill, evaluating skills you've installed, or thinking about agent security broadly, say hello.