Claude Code skill (defensive): vet a third-party SKILL.md, its hooks, and the settings.json hook it would register BEFORE you install. Static scan for injection/exfiltration/dangerous commands; returns an ALLOW/REVIEW/BLOCK verdict with the exact lines to remove.
security skill static-analysis supply-chain defensive ai-agents claude anthropic claude-code claude-code-plugin claude-code-skill
-
Updated
Jun 30, 2026 - JavaScript