aig-skill-scan 0.1.0__tar.gz

aig_skill_scan-0.1.0/LICENSE

@@ -0,0 +1,202 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the
+      purposes of this License, Derivative Works shall not include works
+      that remain separable from, or merely link (or bind by name) to the
+      interfaces of, the Work and Derivative Works thereof.
+
+      "Contribution" shall mean, as used in this License, any work of
+      authorship, including the original version of the Work and any
+      modifications or additions to that Work or Derivative Works of the
+      Work, that is intentionally submitted to the Licensor for inclusion
+      in the Work by the copyright owner or by an individual or Legal
+      Entity authorized to submit on behalf of the copyright owner. For
+      the purposes of this definition, "submitted" means any form of
+      electronic, verbal, or written communication sent to the Licensor or
+      its representatives, including but not limited to communication on
+      electronic mailing lists, source code control systems, and issue
+      tracking systems that are managed by, or on behalf of, the Licensor
+      for the purpose of discussing and improving the Work, but excluding
+      communication that is conspicuously marked or otherwise designated
+      in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by the Licensor
+      and subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have
+      made, use, offer to sell, sell, import, and otherwise transfer the
+      Work, where such license applies only to those patent claims
+      licensable by such Contributor that are necessarily infringed by
+      their Contribution(s) alone or by combination of their
+      Contribution(s) with the Work to which such Contribution(s) was
+      submitted. If You institute patent litigation against any entity
+      (including a cross-claim or counterclaim in a lawsuit) alleging that
+      the Work or a Contribution incorporated within the Work constitutes
+      direct or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate as
+      of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the Work
+      or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You meet
+      the following conditions:
+
+      (a) You must give any other recipients of the Work or Derivative
+          Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work, excluding
+          those notices that do not pertain to any part of the Derivative
+          Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one of
+          the following places: within a NOTICE text file distributed as
+          part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and do
+          not modify the License. You may add Your own attribution notices
+          within Derivative Works that You distribute, alongside or as an
+          addendum to the NOTICE text from the Work, provided that such
+          additional attribution notices cannot be construed as modifying
+          the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions for
+      use, reproduction, or distribution of Your modifications, or for
+      such Derivative Works as a whole, provided Your use, reproduction,
+      and distribution of the Work otherwise complies with the conditions
+      stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this
+      License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all other
+      commercial damages or losses), even if such Contributor has been
+      advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer, and
+      charge a fee for, acceptance of support, warranty, indemnity, or
+      other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf of
+      any other Contributor, and only if You agree to indemnify, defend,
+      and hold each Contributor harmless for any liability incurred by, or
+      claims asserted against, such Contributor by reason of your
+      accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the format of the file. We also recommend that
+      a file and directory name be included on the same line as the
+      "Copyright" statement for easier location by automated tools.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

aig_skill_scan-0.1.0/NOTICE

@@ -0,0 +1,13 @@
+Tencent AI-Infra-Guard
+Copyright 2024-2026 Tencent Zhuque Lab
+
+This product includes software developed at
+Tencent Zhuque Lab (https://github.com/Tencent/AI-Infra-Guard).
+
+Mandatory Attribution Requirement (per Apache License 2.0, Section 4(d)):
+Any redistribution, integration, or derivative work — whether open-source or commercial —
+that incorporates, modifies, or is based on this project must:
+
+1. Clearly state "Based on Tencent Zhuque Lab AI-Infra-Guard" in the product documentation,
+   About page, or release notes.
+2. Include a link to the original repository: https://github.com/Tencent/AI-Infra-Guard.

aig_skill_scan-0.1.0/PKG-INFO

@@ -0,0 +1,218 @@
+Metadata-Version: 2.4
+Name: aig-skill-scan
+Version: 0.1.0
+Summary: AI Native Agent Skill 安全审计工具 —— LLM 驱动的多阶段代码审计与漏洞复审流水线
+Author-email: Tencent Zhuque Lab <ai-infra-guard@tencent.com>
+Maintainer: Tencent Zhuque Lab
+License: Apache-2.0
+Project-URL: Homepage, https://github.com/Tencent/AI-Infra-Guard
+Project-URL: Repository, https://github.com/Tencent/AI-Infra-Guard
+Project-URL: Documentation, https://github.com/Tencent/AI-Infra-Guard/tree/main/skill-scan
+Project-URL: Bug Tracker, https://github.com/Tencent/AI-Infra-Guard/issues
+Project-URL: Source Code, https://github.com/Tencent/AI-Infra-Guard/tree/main/skill-scan
+Keywords: ai-security,agent-security,skill-scan,red-team,llm,audit,vulnerability,ai-infra-guard
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Information Technology
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: Implementation :: CPython
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Typing :: Typed
+Requires-Python: >=3.12
+Description-Content-Type: text/markdown
+License-File: LICENSE
+License-File: NOTICE
+Requires-Dist: loguru==0.7.3
+Requires-Dist: openai==2.8.1
+Requires-Dist: pydantic==2.12.4
+Requires-Dist: python-dotenv==1.0.0
+Provides-Extra: dev
+Requires-Dist: pytest>=8.0.0; extra == "dev"
+Requires-Dist: pytest-asyncio>=0.23.0; extra == "dev"
+Requires-Dist: ruff>=0.11.5; extra == "dev"
+Requires-Dist: build>=1.2; extra == "dev"
+Requires-Dist: twine>=5.0; extra == "dev"
+Dynamic: license-file
+
+# Skill-Scan
+
+> AI Native Agent Skill 安全审计工具 —— LLM 驱动的多阶段代码审计与漏洞复审流水线。
+
+`skill-scan` 是 [Tencent AI-Infra-Guard](https://github.com/Tencent/AI-Infra-Guard) 的子项目，专门用于对 AI Agent Skill 项目（如 WorkBuddy Skill、Coze 插件、Dify 工具等）进行静态安全审计。它通过三阶段流水线对 Skill 代码进行 LLM 驱动的深度分析：
+
+1. **Info Collection** —— 项目结构、语言、入口点识别
+2. **Code Audit** —— 多技能并行审计（数据泄露、工具滥用、间接注入、越权等）
+3. **Vulnerability Review** —— 漏洞去重、误报过滤、严重度评分、报告生成
+
+漏洞分类对齐 [SkillTrustBench](https://github.com/Tencent/AI-Infra-Guard) T01–T09 分类法，判定标准：`malicious`（明确攻击意图）/ `suspicious`（有漏洞但无明确攻击意图）/ `normal`（良性）。
+
+---
+
+## 安装
+
+```bash
+# 从 PyPI 安装
+pip install aig-skill-scan
+
+# 或从源码安装（开发态）
+git clone https://github.com/Tencent/AI-Infra-Guard.git
+cd AI-Infra-Guard/skill-scan
+pip install -e .
+```
+
+要求 Python ≥ 3.12。
+
+---
+
+## 快速开始
+
+### 命令行
+
+```bash
+# 扫描一个本地 Skill 项目目录
+skill-scan --repo /path/to/your/skill \
+           -m deepseek/deepseek-v3.2-exp \
+           -k $OPENROUTER_API_KEY \
+           -u https://openrouter.ai/api/v1 \
+           --language zh
+
+# 也可以用模块方式调用
+python -m skill_scan --repo /path/to/your/skill -k $OPENROUTER_API_KEY
+```
+
+完整参数：
+
+```
+skill-scan --help
+```
+
+| 参数 | 说明 | 默认值 |
+| --- | --- | --- |
+| `--repo` | 要扫描的 Skill 项目文件夹路径（必填） | — |
+| `-m, --model` | LLM 模型名称 | `deepseek/deepseek-v3.2-exp` |
+| `-k, --api_key` | API Key（不传则从环境变量读取） | — |
+| `-u, --base_url` | API 基础 URL | `https://openrouter.ai/api/v1` |
+| `-p, --prompt` | 自定义扫描提示词（可选） | — |
+| `--language` | 输出语言：`zh` / `en` | `zh` |
+| `--debug` | 启用 debug 模式 | `false` |
+
+### 程序化调用
+
+```python
+import asyncio
+from skill_scan.agent.agent import Agent
+from skill_scan.utils.llm import LLM
+from skill_scan.utils.llm_manager import LLMManager
+
+async def run():
+    llm = LLM(model="deepseek/deepseek-v3.2-exp",
+              api_key="sk-...",
+              base_url="https://openrouter.ai/api/v1",
+              context_window=128_000)
+    mgr = LLMManager(api_key="sk-...", base_url="https://openrouter.ai/api/v1")
+    specialized = mgr.get_specialized_llms(["thinking", "coding"])
+
+    agent = Agent(llm=llm, specialized_llms=specialized,
+                  debug=False, language="zh")
+    result = await agent.scan("/path/to/your/skill", "", "zh")
+    print(result)
+
+asyncio.run(run())
+```
+
+---
+
+## 配置
+
+所有配置通过环境变量或 `.env` 文件注入。`skill-scan` 会按以下顺序查找 `.env`：
+
+1. 包根目录（`site-packages/skill_scan/.env`，安装态一般不用）
+2. 当前工作目录（`./.env`，推荐）
+
+主要环境变量：
+
+| 变量 | 说明 | 默认值 |
+| --- | --- | --- |
+| `OPENROUTER_API_KEY` / `LLM_API_KEY` / `OPENAI_API_KEY` | LLM API Key | — |
+| `LLM_MODEL` / `OPENAI_MODEL` | 默认模型 | `deepseek/deepseek-v3.2-exp` |
+| `LLM_BASE_URL` / `OPENAI_BASE_URL` | 默认 Base URL | `https://openrouter.ai/api/v1` |
+| `DEFAULT_MODEL_CONTEXT_WINDOW` | 主模型上下文窗口 | `128000` |
+| `THINKING_MODEL` / `CODING_MODEL` / `FAST_MODEL` | 专用模型 | gemini-2.5-pro / claude-sonnet-4.5 / gemini-2.0-flash-exp |
+| `LOG_LEVEL` | 日志级别 | `INFO` |
+
+---
+
+## 架构
+
+```
+skill_scan/
+├── agent/              # 三阶段 ScanPipeline 编排
+│   ├── agent.py        # Agent 主类，调度 Info→Audit→Review
+│   └── base_agent.py   # LLM 循环 + 工具调用基类
+├── tools/              # XML-schema 工具注册表
+│   ├── registry.py     # @register_tool 装饰器
+│   ├── dispatcher.py   # ToolDispatcher，工具调用分发
+│   ├── file/ ls/ grep/ dir/ base64_decode/ thinking/ finish/
+│   └── *_schema.xml    # 工具的 XML schema（给 LLM 看）
+├── utils/
+│   ├── llm.py          # OpenAI 兼容客户端
+│   ├── llm_manager.py  # 多角色 LLM 管理（thinking/coding/fast）
+│   ├── prompt_manager.py# prompt 模板加载（从 skill_scan/prompt/）
+│   ├── extract_vuln.py # <vuln> XML 提取与解析
+│   ├── project_analyzer.py # 语言识别 + calc_skill_score
+│   └── pre_scan.py     # 预扫描，生成项目概要
+├── prompt/             # 打包的 prompt 模板
+│   ├── system_prompt.md
+│   ├── compact.md  next_prompt.md  format_report.md
+│   └── agents/         # 各阶段专用 prompt
+└── main.py             # CLI 入口（cli / main / parse_args）
+```
+
+---
+
+## 漏洞评分
+
+`calc_skill_score` 对齐 mcp-scan 的 `calc_mcp_score`：
+
+| 严重度 | 扣分 |
+| --- | --- |
+| Critical | -100 |
+| High | -40 |
+| Medium | -25 |
+| Low / Info | -10 |
+
+最终 skill 分数 = `max(0, 100 - Σ扣分)`。
+
+---
+
+## 开发
+
+```bash
+# 安装开发依赖
+pip install -e ".[dev]"
+
+# lint / format
+ruff check skill_scan
+ruff format skill_scan
+
+# 本地构建
+python -m build
+
+# 本地安装测试
+pip install dist/skill_scan-0.1.0-py3-none-any.whl
+skill-scan --help
+```
+
+---
+
+## License
+
+Apache License 2.0。任何再分发或衍生作品必须在文档或界面中明确标注
+"Based on Tencent Zhuque Lab AI-Infra-Guard" 并附上原仓库链接
+<https://github.com/Tencent/AI-Infra-Guard>，详见 [NOTICE](./NOTICE)。

aig_skill_scan-0.1.0/README.md

@@ -0,0 +1,176 @@
+# Skill-Scan
+
+> AI Native Agent Skill 安全审计工具 —— LLM 驱动的多阶段代码审计与漏洞复审流水线。
+
+`skill-scan` 是 [Tencent AI-Infra-Guard](https://github.com/Tencent/AI-Infra-Guard) 的子项目，专门用于对 AI Agent Skill 项目（如 WorkBuddy Skill、Coze 插件、Dify 工具等）进行静态安全审计。它通过三阶段流水线对 Skill 代码进行 LLM 驱动的深度分析：
+
+1. **Info Collection** —— 项目结构、语言、入口点识别
+2. **Code Audit** —— 多技能并行审计（数据泄露、工具滥用、间接注入、越权等）
+3. **Vulnerability Review** —— 漏洞去重、误报过滤、严重度评分、报告生成
+
+漏洞分类对齐 [SkillTrustBench](https://github.com/Tencent/AI-Infra-Guard) T01–T09 分类法，判定标准：`malicious`（明确攻击意图）/ `suspicious`（有漏洞但无明确攻击意图）/ `normal`（良性）。
+
+---
+
+## 安装
+
+```bash
+# 从 PyPI 安装
+pip install aig-skill-scan
+
+# 或从源码安装（开发态）
+git clone https://github.com/Tencent/AI-Infra-Guard.git
+cd AI-Infra-Guard/skill-scan
+pip install -e .
+```
+
+要求 Python ≥ 3.12。
+
+---
+
+## 快速开始
+
+### 命令行
+
+```bash
+# 扫描一个本地 Skill 项目目录
+skill-scan --repo /path/to/your/skill \
+           -m deepseek/deepseek-v3.2-exp \
+           -k $OPENROUTER_API_KEY \
+           -u https://openrouter.ai/api/v1 \
+           --language zh
+
+# 也可以用模块方式调用
+python -m skill_scan --repo /path/to/your/skill -k $OPENROUTER_API_KEY
+```
+
+完整参数：
+
+```
+skill-scan --help
+```
+
+| 参数 | 说明 | 默认值 |
+| --- | --- | --- |
+| `--repo` | 要扫描的 Skill 项目文件夹路径（必填） | — |
+| `-m, --model` | LLM 模型名称 | `deepseek/deepseek-v3.2-exp` |
+| `-k, --api_key` | API Key（不传则从环境变量读取） | — |
+| `-u, --base_url` | API 基础 URL | `https://openrouter.ai/api/v1` |
+| `-p, --prompt` | 自定义扫描提示词（可选） | — |
+| `--language` | 输出语言：`zh` / `en` | `zh` |
+| `--debug` | 启用 debug 模式 | `false` |
+
+### 程序化调用
+
+```python
+import asyncio
+from skill_scan.agent.agent import Agent
+from skill_scan.utils.llm import LLM
+from skill_scan.utils.llm_manager import LLMManager
+
+async def run():
+    llm = LLM(model="deepseek/deepseek-v3.2-exp",
+              api_key="sk-...",
+              base_url="https://openrouter.ai/api/v1",
+              context_window=128_000)
+    mgr = LLMManager(api_key="sk-...", base_url="https://openrouter.ai/api/v1")
+    specialized = mgr.get_specialized_llms(["thinking", "coding"])
+
+    agent = Agent(llm=llm, specialized_llms=specialized,
+                  debug=False, language="zh")
+    result = await agent.scan("/path/to/your/skill", "", "zh")
+    print(result)
+
+asyncio.run(run())
+```
+
+---
+
+## 配置
+
+所有配置通过环境变量或 `.env` 文件注入。`skill-scan` 会按以下顺序查找 `.env`：
+
+1. 包根目录（`site-packages/skill_scan/.env`，安装态一般不用）
+2. 当前工作目录（`./.env`，推荐）
+
+主要环境变量：
+
+| 变量 | 说明 | 默认值 |
+| --- | --- | --- |
+| `OPENROUTER_API_KEY` / `LLM_API_KEY` / `OPENAI_API_KEY` | LLM API Key | — |
+| `LLM_MODEL` / `OPENAI_MODEL` | 默认模型 | `deepseek/deepseek-v3.2-exp` |
+| `LLM_BASE_URL` / `OPENAI_BASE_URL` | 默认 Base URL | `https://openrouter.ai/api/v1` |
+| `DEFAULT_MODEL_CONTEXT_WINDOW` | 主模型上下文窗口 | `128000` |
+| `THINKING_MODEL` / `CODING_MODEL` / `FAST_MODEL` | 专用模型 | gemini-2.5-pro / claude-sonnet-4.5 / gemini-2.0-flash-exp |
+| `LOG_LEVEL` | 日志级别 | `INFO` |
+
+---
+
+## 架构
+
+```
+skill_scan/
+├── agent/              # 三阶段 ScanPipeline 编排
+│   ├── agent.py        # Agent 主类，调度 Info→Audit→Review
+│   └── base_agent.py   # LLM 循环 + 工具调用基类
+├── tools/              # XML-schema 工具注册表
+│   ├── registry.py     # @register_tool 装饰器
+│   ├── dispatcher.py   # ToolDispatcher，工具调用分发
+│   ├── file/ ls/ grep/ dir/ base64_decode/ thinking/ finish/
+│   └── *_schema.xml    # 工具的 XML schema（给 LLM 看）
+├── utils/
+│   ├── llm.py          # OpenAI 兼容客户端
+│   ├── llm_manager.py  # 多角色 LLM 管理（thinking/coding/fast）
+│   ├── prompt_manager.py# prompt 模板加载（从 skill_scan/prompt/）
+│   ├── extract_vuln.py # <vuln> XML 提取与解析
+│   ├── project_analyzer.py # 语言识别 + calc_skill_score
+│   └── pre_scan.py     # 预扫描，生成项目概要
+├── prompt/             # 打包的 prompt 模板
+│   ├── system_prompt.md
+│   ├── compact.md  next_prompt.md  format_report.md
+│   └── agents/         # 各阶段专用 prompt
+└── main.py             # CLI 入口（cli / main / parse_args）
+```
+
+---
+
+## 漏洞评分
+
+`calc_skill_score` 对齐 mcp-scan 的 `calc_mcp_score`：
+
+| 严重度 | 扣分 |
+| --- | --- |
+| Critical | -100 |
+| High | -40 |
+| Medium | -25 |
+| Low / Info | -10 |
+
+最终 skill 分数 = `max(0, 100 - Σ扣分)`。
+
+---
+
+## 开发
+
+```bash
+# 安装开发依赖
+pip install -e ".[dev]"
+
+# lint / format
+ruff check skill_scan
+ruff format skill_scan
+
+# 本地构建
+python -m build
+
+# 本地安装测试
+pip install dist/skill_scan-0.1.0-py3-none-any.whl
+skill-scan --help
+```
+
+---
+
+## License
+
+Apache License 2.0。任何再分发或衍生作品必须在文档或界面中明确标注
+"Based on Tencent Zhuque Lab AI-Infra-Guard" 并附上原仓库链接
+<https://github.com/Tencent/AI-Infra-Guard>，详见 [NOTICE](./NOTICE)。