skill-checker 0.1.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +661 -0
- package/README.md +52 -0
- package/bin/skill-checker.js +4 -0
- package/dist/cli.d.ts +2 -0
- package/dist/cli.js +2166 -0
- package/dist/cli.js.map +1 -0
- package/dist/index.d.ts +160 -0
- package/dist/index.js +2168 -0
- package/dist/index.js.map +1 -0
- package/hook/install.ts +88 -0
- package/hook/skill-gate.sh +81 -0
- package/package.json +58 -0
package/README.md
ADDED
|
@@ -0,0 +1,52 @@
|
|
|
1
|
+
# Skill Checker
|
|
2
|
+
|
|
3
|
+
Security checker for Claude Code skills — detect injection, malicious code, and supply chain risks before installation.
|
|
4
|
+
|
|
5
|
+
## Features
|
|
6
|
+
|
|
7
|
+
- **48 security rules** across 6 categories: structural validity, content quality, injection detection, code safety, supply chain, and resource abuse
|
|
8
|
+
- **Scoring system**: Grade A–F with 0–100 score
|
|
9
|
+
- **Dual entry**: CLI tool + PreToolUse hook for automatic interception
|
|
10
|
+
- **Configurable policies**: strict / balanced / permissive approval strategies
|
|
11
|
+
- **Multiple output formats**: terminal (color), JSON, hook response
|
|
12
|
+
|
|
13
|
+
## Quick Start
|
|
14
|
+
|
|
15
|
+
```bash
|
|
16
|
+
# Scan a skill directory
|
|
17
|
+
npx skill-checker scan ./path/to/skill/
|
|
18
|
+
|
|
19
|
+
# Scan with JSON output
|
|
20
|
+
npx skill-checker scan ./path/to/skill/ --format json
|
|
21
|
+
|
|
22
|
+
# Scan with strict policy
|
|
23
|
+
npx skill-checker scan ./path/to/skill/ --policy strict
|
|
24
|
+
```
|
|
25
|
+
|
|
26
|
+
## Installation
|
|
27
|
+
|
|
28
|
+
```bash
|
|
29
|
+
npm install -g skill-checker
|
|
30
|
+
```
|
|
31
|
+
|
|
32
|
+
## Configuration
|
|
33
|
+
|
|
34
|
+
Create a `.skillcheckerrc.yaml` in your project root or home directory:
|
|
35
|
+
|
|
36
|
+
```yaml
|
|
37
|
+
policy: balanced
|
|
38
|
+
|
|
39
|
+
overrides:
|
|
40
|
+
CODE-006: LOW
|
|
41
|
+
|
|
42
|
+
ignore:
|
|
43
|
+
- CONT-006
|
|
44
|
+
```
|
|
45
|
+
|
|
46
|
+
## License
|
|
47
|
+
|
|
48
|
+
This project is licensed under the **GNU Affero General Public License v3.0 (AGPLv3)** - see the [LICENSE](LICENSE) file for details.
|
|
49
|
+
|
|
50
|
+
**商业授权 (Commercial License)**
|
|
51
|
+
|
|
52
|
+
如果您希望将本工具集成到闭源的商业产品、SaaS 服务中,或者由于公司合规原因无法遵守 AGPLv3 协议,请通过 Alexander.kinging@gmail.com 联系作者购买商业授权。
|
package/dist/cli.d.ts
ADDED