跳到正文
cccskills
免费在 GitHub 公开

prism-scanner

Security scanner for AI Agent skills, plugins, and MCP servers. Use when: user asks to scan a skill, check if a plugin is safe, vet an MCP server, review skill security, detect malicious code, supply chain safety, or says 'is this safe to install', 'scan this skill', 'check this MCP server', 'security scan', 'vetting', 'skill safety', 'prism scan', '安全扫描', '这个插件安全吗', '扫描一下', '检查安全性', '安装前检查', '技能审查'.

中文简介正在准备中。当前显示原文说明。

aidongise-cell/prism-scanner
查看安装方法

包含的文件（159）

  • SKILL.md3.5 KB
  • .dockerignore94 B
  • .github/ISSUE_TEMPLATE/bug_report.yml1.5 KB
  • .github/ISSUE_TEMPLATE/false_negative.yml1.1 KB
  • .github/ISSUE_TEMPLATE/false_positive.yml1.1 KB
  • .github/ISSUE_TEMPLATE/new_rule.yml1.5 KB
  • .github/PULL_REQUEST_TEMPLATE.md445 B
  • .github/workflows/ci.yml678 B
  • .github/workflows/example-scan.yml788 B
  • .github/workflows/prism-scan.yml345 B
  • .gitignore291 B
  • 2026-03-31-README.md20.9 KB
  • action.yml4.0 KB
  • CHANGELOG.md6.2 KB
  • CODE_OF_CONDUCT.md1.4 KB
  • CONTRIBUTING.md6.6 KB
  • docker-compose.yml131 B
  • Dockerfile361 B
  • examples/clawhub-scan-report.md5.9 KB
  • Formula/prism-scanner.rb999 B
  • Formula/README.md376 B
  • LICENSE11.0 KB
  • npm/bin/prism-scanner.js1.7 KB
  • npm/package.json600 B
  • npm/README.md595 B
  • pyproject.toml1.6 KB
  • README.md15.2 KB
  • reports/clawhub-top100/_aggregate_stats.json28.4 KB
  • reports/clawhub-top100/ClawHub-Top100-Security-Report.md7.4 KB
  • reports/clawhub-top100/README.md1.4 KB
  • reports/clawhub-top100/scans/0xartex__token-research.json412 B
  • reports/clawhub-top100/scans/2233admin__api-monitor.json9.9 KB
  • reports/clawhub-top100/scans/aadipapp__mac-power-tools.json418 B
  • reports/clawhub-top100/scans/adlai88__polymarket-elon-tweets.json60.1 KB
  • reports/clawhub-top100/scans/ajarmoszuk__crypton-esim.json36.9 KB
  • reports/clawhub-top100/scans/alti-systems__kling.json400 B
  • reports/clawhub-top100/scans/anmolnagpal__terraform-ai-skills.json439 B
  • reports/clawhub-top100/scans/arthuronai__ai-layoff-radar.json41.2 KB
  • reports/clawhub-top100/scans/autogame-17__feishu-broadcast.json430 B
  • reports/clawhub-top100/scans/awsome-o__grafana-lens.json5.3 KB
  • reports/clawhub-top100/scans/beee003__q-kdb-code-review.json13.3 KB
  • reports/clawhub-top100/scans/blackeight4752__doubao-ata-subtitle.json17.8 KB
  • reports/clawhub-top100/scans/brennerspear__system-watchdog.json430 B
  • reports/clawhub-top100/scans/c-drew__telegram-usage.json409 B
  • reports/clawhub-top100/scans/cassh100k__soulkeeper.json21.1 KB
  • reports/clawhub-top100/scans/chaunceyliu__trade-with-aiusd.json1.8 KB
  • reports/clawhub-top100/scans/chyher__team-discuss.json1.2 KB
  • reports/clawhub-top100/scans/claudiodrusus__skill-4.json409 B
  • reports/clawhub-top100/scans/cp7553479__seedream-image-generation.json5.0 KB
  • reports/clawhub-top100/scans/dagangtj__ai-economic-tracker.json9.2 KB
  • reports/clawhub-top100/scans/dashiming__godot-bridge.json412 B
  • reports/clawhub-top100/scans/dhardie__llm-supervisor.json412 B
  • reports/clawhub-top100/scans/dongsheng123132__mac-ai-optimizer.json442 B
  • reports/clawhub-top100/scans/duyeng__intercom-conversations.json433 B
  • reports/clawhub-top100/scans/eisimo__agentic-letters.json11.5 KB
  • reports/clawhub-top100/scans/ethersuite__moltmail-ethermail.json1.2 KB
  • reports/clawhub-top100/scans/feiyang2007__360-search.json3.2 KB
  • reports/clawhub-top100/scans/franky0617__etf-assistant.json418 B
  • reports/clawhub-top100/scans/georges91560__security-sentinel-skill.json454 B
  • reports/clawhub-top100/scans/griffithkk3-del__lark-wiki-writer.json21.2 KB
  • reports/clawhub-top100/scans/haiyangchenbj__invassistant.json130.1 KB
  • reports/clawhub-top100/scans/harrierdb__cmc-kline-data-collector.json2.5 KB
  • reports/clawhub-top100/scans/henrino3__heimdall.json20.0 KB
  • reports/clawhub-top100/scans/homeofe__openclaw-ispconfig.json3.1 KB
  • reports/clawhub-top100/scans/hubertsing__conan-weekly-report.json435 B
  • reports/clawhub-top100/scans/idanmann10__startclaw-optimizer.json2.8 KB
  • reports/clawhub-top100/scans/irideas__bobo-context-cleanup.json430 B
  • reports/clawhub-top100/scans/jachian-lee__feishu-doc-reviewer.json88.1 KB
  • reports/clawhub-top100/scans/jason-chew__citrea-claw-skill.json12.5 KB
  • reports/clawhub-top100/scans/jerryops2026-del__xhs-auto-publish.json445 B
  • reports/clawhub-top100/scans/jisuapi__exchange.json16.0 KB
  • reports/clawhub-top100/scans/jisuapi__stockhistory.json7.7 KB
  • reports/clawhub-top100/scans/johnjerry8749__weather-py.json60.9 KB
  • reports/clawhub-top100/scans/jrojas537__flight-pricer.json4.8 KB
  • reports/clawhub-top100/scans/kapishdima__dtek-light.json1.1 KB
  • reports/clawhub-top100/scans/keylimesoda__tommy-monitoring-dashboard.json460 B
  • reports/clawhub-top100/scans/koolninad__uid-life.json400 B
  • reports/clawhub-top100/scans/larryfang__em-intel.json83.9 KB
  • reports/clawhub-top100/scans/leongfans__skillforge-discovery.json436 B
  • reports/clawhub-top100/scans/lilianzhu__zadig.json1.9 KB
  • reports/clawhub-top100/scans/logesh2496__spaces.json24.8 KB
  • reports/clawhub-top100/scans/lucaszh7__auto-authenticator-local.json7.9 KB
  • reports/clawhub-top100/scans/machunlin__video-merger.json412 B
  • reports/clawhub-top100/scans/manuelcorpas__equity-scorer.json14.2 KB
  • reports/clawhub-top100/scans/maverick-software__safe-update-merge.json451 B
  • reports/clawhub-top100/scans/mig6671__phoenix-shield.json412 B
  • reports/clawhub-top100/scans/mookim-eth__xclaw-skill.json412 B
  • reports/clawhub-top100/scans/mosonchan2023__docker-compose-manager.json453 B
  • reports/clawhub-top100/scans/mosonchan2023__polymarket-copy-trade-bot.json462 B
  • reports/clawhub-top100/scans/mosonchan2023__stock-screener.json429 B
  • reports/clawhub-top100/scans/muguozi1__evolver-1-17-1.json416 B
  • reports/clawhub-top100/scans/neal-collab__auto-whisper-safe.json432 B
  • reports/clawhub-top100/scans/night556__feishu-doc-exporter.json430 B
  • reports/clawhub-top100/scans/numba1ne__nft-skill.json400 B
  • reports/clawhub-top100/scans/omaression__advanced-dispatcher-skill.json7.8 KB
  • reports/clawhub-top100/scans/otman-ai__tikto-automation.json11.0 KB
  • reports/clawhub-top100/scans/paulpreibisch__agentvibes-clawbot-tts.json2.1 KB
  • reports/clawhub-top100/scans/pitertxus__openclaw-memory-pensieve-algorand.json154.6 KB
  • reports/clawhub-top100/scans/puppetcat-fire__secure-p2p-messenger-real.json466 B
  • reports/clawhub-top100/scans/qqliaoxin__comfyui-api.json31.9 KB
  • reports/clawhub-top100/scans/rcholic__predicate-snapshot.json424 B
  • reports/clawhub-top100/scans/riffvibe__vibemate.json397 B
  • reports/clawhub-top100/scans/rsquaredsolutions2026__payrail402.json442 B
  • reports/clawhub-top100/scans/sakurako-irs__clawreceipt.json1.8 KB
  • reports/clawhub-top100/scans/scccmsd__custom-smtp-sender.json1.3 KB
  • reports/clawhub-top100/scans/shaharsha__google-search-grounding.json11.7 KB
  • reports/clawhub-top100/scans/shiiyyo__github-manager.json412 B
  • reports/clawhub-top100/scans/sinabs__ifind-data.json397 B
  • reports/clawhub-top100/scans/sonyrw__workspace-main.json1.9 KB
  • reports/clawhub-top100/scans/stj001__sensitive-data-masker.json23.8 KB
  • reports/clawhub-top100/scans/sunjian__weryai-video.json406 B
  • reports/clawhub-top100/scans/supere989__vectorguard-nano.json424 B
  • reports/clawhub-top100/scans/tariqsumatri82__a2a-market-1-1-0.json19.9 KB
  • reports/clawhub-top100/scans/thesethrose__apple-docs.json412 B
  • reports/clawhub-top100/scans/thu-nmrc__zeelin-social-watch.json12.3 KB
  • reports/clawhub-top100/scans/tyzzt__wsl-powershell-full.json421 B
  • reports/clawhub-top100/scans/uxbryan__spotplay.json12.4 KB
  • reports/clawhub-top100/scans/viktorbjorn__clawhub-search-verify.json445 B
  • reports/clawhub-top100/scans/wangwu-30__neo-market.json406 B
  • reports/clawhub-top100/scans/wen-si__croskill.json3.4 KB
  • reports/clawhub-top100/scans/windy-001-crypto__data-harvester-v2.json1.8 KB
  • reports/clawhub-top100/scans/xaiohuangningde__doc-handler.json2.1 KB
  • reports/clawhub-top100/scans/xqw1377-prog__musk-insider-pro.json11.9 KB
  • reports/clawhub-top100/scans/xuzhiwei0217-doctor__automation-workflow.json463 B
  • reports/clawhub-top100/scans/yipintangzsp__amazon-ppc-optimizer.json444 B
  • reports/clawhub-top100/scans/yipintangzsp__weibo-trending-bot.json439 B
  • reports/clawhub-top100/scans/youpele52__stock-fundamentals.json34.4 KB
  • reports/clawhub-top100/scans/zedit42__arena-system.json406 B
  • reports/clawhub-top100/scans/zhaog100__hacker-news-surfer.json426 B
  • rules/malicious_signatures.yaml4.4 KB
  • rules/permissions.yaml3.6 KB
  • rules/suspicious_domains.yaml1.5 KB
  • SECURITY.md4.2 KB
  • server.json586 B
  • skill.json800 B
  • src/prism/__init__.py108 B
  • src/prism/__main__.py35 B
  • src/prism/cleaner.py9.3 KB
  • src/prism/cli.py12.3 KB
  • src/prism/engines/__init__.py0 B
  • src/prism/engines/ast_engine.py34.9 KB
  • src/prism/engines/manifest_engine.py32.6 KB
  • src/prism/engines/pattern_engine.py30.8 KB
  • src/prism/engines/residue_engine.py18.2 KB
  • src/prism/engines/taint.py7.2 KB
  • src/prism/fetcher.py2.7 KB
  • src/prism/mcp_server.py10.2 KB
  • src/prism/models.py3.2 KB
  • src/prism/report.py14.5 KB
  • src/prism/rules_loader.py1.5 KB
  • src/prism/rules/malicious_signatures.yaml4.5 KB
  • src/prism/rules/permissions.yaml3.6 KB
  • src/prism/rules/suspicious_domains.yaml1.5 KB
  • src/prism/scanner.py4.4 KB
  • src/prism/scoring.py3.1 KB
  • src/prism/suppression.py1.7 KB
  • tests/fixtures/malicious_skill/evil_skill.py1.6 KB
  • tests/fixtures/malicious_skill/package.json213 B
  • tests/test_scanner.py43.8 KB

SKILL.md（原文）

安装前可以查看交给 AI 代理的指令内容。

Prism Scanner — Agent Security Scanner

You are a security analyst using Prism Scanner to detect malicious code and security risks in AI Agent skills, plugins, and MCP servers.

When to Use

  • User wants to install a new skill and needs a safety check
  • User asks "is this skill/plugin/MCP server safe?"
  • User wants to scan a directory, repo, or package for security risks
  • User mentions supply chain security for agent extensions
  • User wants to clean up system residue left by uninstalled skills
  • Before installing any skill from ClawHub, GitHub, npm, or PyPI

Prerequisites

Prism Scanner must be installed. If not available, install it:

pip install prism-scanner

Verify installation:

prism --version

Usage

Scan a local skill/plugin

prism scan <path-to-skill>

Scan a GitHub repository

prism scan <github-url>

Scan with specific platform detection

prism scan <target> --platform clawhub|mcp|npm|pip

Get machine-readable output

prism scan <target> --format json

Generate HTML report

prism scan <target> --format html -o report.html

System residue cleanup (post-uninstall)

prism clean --scan     # Report leftover files
prism clean --plan     # Show cleanup plan
prism clean --apply    # Execute cleanup with backups

CI/CD integration

prism scan <target> --format sarif -o results.sarif --fail-on high

Understanding Results

Prism assigns a grade from A to F:

GradeMeaningAction
ASafe — no findings or INFO onlySafe to use
BNotice — LOW findings onlyLikely safe, minor observations
CCaution — 1-4 MEDIUM findingsReview before use
DDanger — HIGH findingsUse in sandbox only
FCritical — CRITICAL findingsDo not install

Detection Coverage

Prism runs 39+ detection rules across 3 layers:

  1. Code Behavior (S1-S14): Shell execution, data exfiltration, persistence, taint tracking
  2. Metadata (M1-M6, P1-P9): Typo-squatting, hardcoded credentials, obfuscated code, malicious signatures
  3. System Residue (R1-R10): LaunchAgents, crontab pollution, shell config modifications

Workflow

When the user asks to check a skill's safety:

  1. Determine the target (local path, GitHub URL, or package name)
  2. Run prism scan <target> --format json
  3. Parse the JSON output
  4. Present the grade, findings summary, and recommendation
  5. If grade is D or F, strongly warn the user not to install
  6. If grade is C, advise reviewing specific findings before proceeding
  7. If grade is A or B, confirm it's safe with a brief summary

When the user wants to clean up after uninstalling a skill:

  1. Run prism clean --scan to detect residue
  2. Show the user what was found
  3. If cleanup is desired, run prism clean --plan then prism clean --apply

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护，适用 Google 的隐私权政策和服务条款。

报告此技能的问题