Security check for projects built with AI and for skills, plugins and MCP servers before installing them. Finds vulnerable or malicious dependencies (OSV.dev, NVD, CISA KEV, EPSS), leaked secrets, AI-app mistakes (keys exposed in the frontend, open CORS, Supabase without RLS, open Firebase rules), flaws in the app's code (SQL and shell injection, XSS, SSRF, path traversal, model output run as…
Install
The individual skill folder is not confirmed. This command opens the repository’s skill selector; follow the upstream instructions.
skills CLI
npx skills add HiveControlAgents/StingWard