skill-scanner

// about

Cisco combines YAML and YARA-X pattern rules, AST and dataflow analysis, an optional LLM judge and a bounded CEL decision layer. It reads Codex and Cursor skill formats, and with --lenient also scans Claude Code commands and flat markdown repos. It has a CLI, a Python SDK and an interactive wizard. It's a detector, so a clean scan is not a certification.

See the repository README for setup instructions.