cisco-ai-skill-scanner 1.0.0__tar.gz → 1.0.2__tar.gz

{cisco_ai_skill_scanner-1.0.0 → cisco_ai_skill_scanner-1.0.2}/.github/ISSUE_TEMPLATE/bug_report.md

@@ -13,7 +13,7 @@ A clear and concise description of the bug.
 ## Steps to Reproduce
 
 1. Install version: [e.g., 0.2.0]
-2. Run command: `skill-analyzer scan ...`
+2. Run command: `skill-scanner scan ...`
 3. Observe error: [describe what happened]
 
 ## Expected Behavior

{cisco_ai_skill_scanner-1.0.0 → cisco_ai_skill_scanner-1.0.2}/.github/ISSUE_TEMPLATE/feature_request.md

@@ -29,7 +29,7 @@ Describe a specific scenario where this feature would be useful.
 **Example:**
 ```bash
 # How the feature would be used
-skill-analyzer scan /path/to/skill --your-new-feature
+skill-scanner scan /path/to/skill --your-new-feature
 ```
 
 ## Benefits
@@ -53,4 +53,4 @@ Screenshots, mockups, links to similar features in other tools, etc.
 - [ ] I have searched existing issues/PRs for similar requests
 - [ ] I have described a clear use case
 - [ ] I have considered implementation complexity
-- [ ] This aligns with the project's goals (security scanning for Claude Skills)
+- [ ] This aligns with the project's goals (security scanning for Agent Skills)

{cisco_ai_skill_scanner-1.0.0 → cisco_ai_skill_scanner-1.0.2}/.github/PULL_REQUEST_TEMPLATE.md

@@ -41,7 +41,7 @@ Describe manual testing performed:
 
 ```bash
 # Commands run for testing
-skill-analyzer scan examples/test-skill
+skill-scanner scan examples/test-skill
 ```
 
 **Results:**
@@ -71,8 +71,8 @@ skill-analyzer scan examples/test-skill
 - [ ] No eval/exec on user input without sanitization
 
 ### Testing
-- [ ] Tests pass: `pytest tests/ -q`
-- [ ] Benchmark passes: `python evals/benchmark_runner.py`
+- [ ] Tests pass: `uv run pre-commit run --all-files`
+- [ ] Benchmark passes: `uv run python evals/benchmark_runner.py`
 - [ ] No regressions in existing functionality
 - [ ] Edge cases covered
 

{cisco_ai_skill_scanner-1.0.0 → cisco_ai_skill_scanner-1.0.2}/.github/workflows/python-tests.yml

@@ -13,6 +13,11 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v4
 
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: "1.22"
+
       - name: Set up Python for uv
         uses: astral-sh/setup-uv@v6.7.0
 
@@ -79,7 +84,7 @@ jobs:
         run: |
           uv run pytest tests/ \
             --ignore=tests/test_llm_analyzer.py \
-            -v --tb=short --cov=skillanalyzer --cov-report=xml
+            -v --tb=short --cov=skill_scanner --cov-report=xml
 
       - name: Upload coverage to Codecov
         uses: codecov/codecov-action@v4

{cisco_ai_skill_scanner-1.0.0 → cisco_ai_skill_scanner-1.0.2}/.gitignore

@@ -5,6 +5,8 @@ __pycache__/
 *.so
 .Python
 build/
+# Auto-generated version file (hatch-vcs)
+skill_scanner/_version.py
 develop-eggs/
 dist/
 downloads/
@@ -81,3 +83,16 @@ Thumbs.db
 # Local environment files
 .env.local
 .env.*.local
+
+# Local benchmark and analysis data
+.local_benchmark/
+
+# Agent/AI tool configs (user-specific)
+.agent/
+.agents/
+.claude/
+.codex/
+.cursor/skills/
+
+# Jupyter notebooks (local analysis)
+*.ipynb

{cisco_ai_skill_scanner-1.0.0 → cisco_ai_skill_scanner-1.0.2}/CODEOWNERS

@@ -1,3 +1,3 @@
 # CODEOWNERS
 # The first matching pattern takes precedence.
-* @cisco-ai-defense/skill-analyzer-reviewers
+* @cisco-ai-defense/skill-scanner-reviewers

{cisco_ai_skill_scanner-1.0.0 → cisco_ai_skill_scanner-1.0.2}/CONTRIBUTING.md

@@ -17,6 +17,7 @@ in any real-time space e.g., Slack, Discord, etc.
 ## Development Setup
 
 See [docs/developing.md](/docs/developing.md) for complete environment setup instructions, including:
+
 - Installing prerequisites (Python 3.10+, uv)
 - Cloning and configuring the repository
 - Installing dependencies and pre-commit hooks
@@ -48,6 +49,8 @@ major version release.
 ### Pull Request Checklist
 
 - [ ] All pre-commit hooks pass (`uv run pre-commit run --all-files`)
+- [ ] All unit tests pass (`uv run pytest tests/`)
+- [ ] All benchmarks pass without significant regressions (`uv run python evals/benchmark_runner.py`)
 - [ ] Tests added/updated for changes (see [TESTING.md](/TESTING.md))
 - [ ] Documentation updated if needed
 - [ ] Commit messages follow conventional format (e.g., `feat:`, `fix:`, `docs:`)
@@ -62,7 +65,7 @@ you can do:
   _[Reporting Issues](#reporting-issues)_ section, providing feedback to the
   issue's author on what might be missing.
 - Review and update the existing content of our
-  [Wiki](https://github.com/cisco-ai-defense/skill-scanner/wiki) with up-to-date
+  [Wiki](https://deepwiki.com/cisco-ai-defense/skill-scanner) with up-to-date
   instructions and code samples.
 - Review existing pull requests, and testing patches against real existing
   applications that use `skill-scanner`.

{cisco_ai_skill_scanner-1.0.0 → cisco_ai_skill_scanner-1.0.2}/PKG-INFO

@@ -1,7 +1,7 @@
 Metadata-Version: 2.4
 Name: cisco-ai-skill-scanner
-Version: 1.0.0
-Summary: Security scanner for Claude Skills and Codex Skills packages - Detects prompt injection, data exfiltration, and malicious code
+Version: 1.0.2
+Summary: Security scanner for Agent Skills packages - Detects prompt injection, data exfiltration, and malicious code
 Project-URL: Homepage, https://github.com/cisco-ai-defense/skill-scanner
 Project-URL: Documentation, https://github.com/cisco-ai-defense/skill-scanner#readme
 Project-URL: Repository, https://github.com/cisco-ai-defense/skill-scanner
@@ -68,14 +68,14 @@ Description-Content-Type: text/markdown
 
 A security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. Combines **pattern-based detection** (YAML + YARA), **LLM-as-a-judge**, and **behavioral dataflow analysis** for comprehensive threat detection.
 
-Supports [Anthropic Claude Skills](https://docs.anthropic.com/en/docs/agents-and-tools/claude-skills), [OpenAI Codex Skills](https://openai.github.io/codex/), and [Cursor Agent Skills](https://docs.cursor.com/context/rules) formats following the [Agent Skills specification](https://agentskills.io).
+Supports [OpenAI Codex Skills](https://openai.github.io/codex/) and [Cursor Agent Skills](https://docs.cursor.com/context/rules) formats following the [Agent Skills specification](https://agentskills.io).
 
 ---
 
 ## Highlights
 
 - **Multi-Engine Detection** - Static analysis, behavioral dataflow, LLM semantic analysis, and cloud-based scanning
-- **False Positive Filtering** - Meta-analyzer achieves ~65% noise reduction while maintaining 100% threat detection
+- **False Positive Filtering** - Meta-analyzer significantly reduces noise while preserving detection capability
 - **CI/CD Ready** - SARIF output for GitHub Code Scanning, exit codes for build failures
 - **Extensible** - Plugin architecture for custom analyzers
 
@@ -151,29 +151,41 @@ export AI_DEFENSE_API_KEY="your_aidefense_api_key"
 
 ```bash
 # Scan a single skill (static analyzer only)
-skill-analyzer scan /path/to/skill
+skill-scanner scan /path/to/skill
 
 # Scan with behavioral analyzer (dataflow analysis)
-skill-analyzer scan /path/to/skill --use-behavioral
+skill-scanner scan /path/to/skill --use-behavioral
 
 # Scan with all engines
-skill-analyzer scan /path/to/skill --use-behavioral --use-llm --use-aidefense
+skill-scanner scan /path/to/skill --use-behavioral --use-llm --use-aidefense
 
 # Scan with meta-analyzer for false positive filtering
-skill-analyzer scan /path/to/skill --use-llm --enable-meta
+skill-scanner scan /path/to/skill --use-llm --enable-meta
 
 # Scan multiple skills recursively
-skill-analyzer scan-all /path/to/skills --recursive --use-behavioral
+skill-scanner scan-all /path/to/skills --recursive --use-behavioral
 
 # CI/CD: Fail build if threats found
-skill-analyzer scan-all ./skills --fail-on-findings --format sarif --output results.sarif
+skill-scanner scan-all ./skills --fail-on-findings --format sarif --output results.sarif
+
+# Use custom YARA rules
+skill-scanner scan /path/to/skill --custom-rules /path/to/my-rules/
+
+# Disable specific noisy rules
+skill-scanner scan /path/to/skill --disable-rule YARA_script_injection --disable-rule MANIFEST_MISSING_LICENSE
+
+# Strict mode (more findings, higher FP rate)
+skill-scanner scan /path/to/skill --yara-mode strict
+
+# Permissive mode (fewer findings, may miss some threats)
+skill-scanner scan /path/to/skill --yara-mode permissive
 ```
 
 ### Python SDK
 
 ```python
-from skillanalyzer import SkillScanner
-from skillanalyzer.core.analyzers import StaticAnalyzer, BehavioralAnalyzer
+from skill_scanner import SkillScanner
+from skill_scanner.core.analyzers import StaticAnalyzer, BehavioralAnalyzer
 
 # Create scanner with analyzers
 scanner = SkillScanner(analyzers=[
@@ -215,13 +227,16 @@ print(f"Findings: {len(result.findings)}")
 | `--format` | Output: `summary`, `json`, `markdown`, `table`, `sarif` |
 | `--output PATH` | Save report to file |
 | `--fail-on-findings` | Exit with error if HIGH/CRITICAL found |
+| `--yara-mode` | Detection mode: `strict`, `balanced` (default), `permissive` |
+| `--custom-rules PATH` | Use custom YARA rules from directory |
+| `--disable-rule RULE` | Disable specific rule (can repeat) |
 
 ---
 
 ## Example Output
 
 ```
-$ skill-analyzer scan ./my-skill --use-behavioral
+$ skill-scanner scan ./my-skill --use-behavioral
 
 ============================================================
 Skill: my-skill

{cisco_ai_skill_scanner-1.0.0 → cisco_ai_skill_scanner-1.0.2}/README.md

@@ -10,14 +10,14 @@
 
 A security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. Combines **pattern-based detection** (YAML + YARA), **LLM-as-a-judge**, and **behavioral dataflow analysis** for comprehensive threat detection.
 
-Supports [Anthropic Claude Skills](https://docs.anthropic.com/en/docs/agents-and-tools/claude-skills), [OpenAI Codex Skills](https://openai.github.io/codex/), and [Cursor Agent Skills](https://docs.cursor.com/context/rules) formats following the [Agent Skills specification](https://agentskills.io).
+Supports [OpenAI Codex Skills](https://openai.github.io/codex/) and [Cursor Agent Skills](https://docs.cursor.com/context/rules) formats following the [Agent Skills specification](https://agentskills.io).
 
 ---
 
 ## Highlights
 
 - **Multi-Engine Detection** - Static analysis, behavioral dataflow, LLM semantic analysis, and cloud-based scanning
-- **False Positive Filtering** - Meta-analyzer achieves ~65% noise reduction while maintaining 100% threat detection
+- **False Positive Filtering** - Meta-analyzer significantly reduces noise while preserving detection capability
 - **CI/CD Ready** - SARIF output for GitHub Code Scanning, exit codes for build failures
 - **Extensible** - Plugin architecture for custom analyzers
 
@@ -93,29 +93,41 @@ export AI_DEFENSE_API_KEY="your_aidefense_api_key"
 
 ```bash
 # Scan a single skill (static analyzer only)
-skill-analyzer scan /path/to/skill
+skill-scanner scan /path/to/skill
 
 # Scan with behavioral analyzer (dataflow analysis)
-skill-analyzer scan /path/to/skill --use-behavioral
+skill-scanner scan /path/to/skill --use-behavioral
 
 # Scan with all engines
-skill-analyzer scan /path/to/skill --use-behavioral --use-llm --use-aidefense
+skill-scanner scan /path/to/skill --use-behavioral --use-llm --use-aidefense
 
 # Scan with meta-analyzer for false positive filtering
-skill-analyzer scan /path/to/skill --use-llm --enable-meta
+skill-scanner scan /path/to/skill --use-llm --enable-meta
 
 # Scan multiple skills recursively
-skill-analyzer scan-all /path/to/skills --recursive --use-behavioral
+skill-scanner scan-all /path/to/skills --recursive --use-behavioral
 
 # CI/CD: Fail build if threats found
-skill-analyzer scan-all ./skills --fail-on-findings --format sarif --output results.sarif
+skill-scanner scan-all ./skills --fail-on-findings --format sarif --output results.sarif
+
+# Use custom YARA rules
+skill-scanner scan /path/to/skill --custom-rules /path/to/my-rules/
+
+# Disable specific noisy rules
+skill-scanner scan /path/to/skill --disable-rule YARA_script_injection --disable-rule MANIFEST_MISSING_LICENSE
+
+# Strict mode (more findings, higher FP rate)
+skill-scanner scan /path/to/skill --yara-mode strict
+
+# Permissive mode (fewer findings, may miss some threats)
+skill-scanner scan /path/to/skill --yara-mode permissive
 ```
 
 ### Python SDK
 
 ```python
-from skillanalyzer import SkillScanner
-from skillanalyzer.core.analyzers import StaticAnalyzer, BehavioralAnalyzer
+from skill_scanner import SkillScanner
+from skill_scanner.core.analyzers import StaticAnalyzer, BehavioralAnalyzer
 
 # Create scanner with analyzers
 scanner = SkillScanner(analyzers=[
@@ -157,13 +169,16 @@ print(f"Findings: {len(result.findings)}")
 | `--format` | Output: `summary`, `json`, `markdown`, `table`, `sarif` |
 | `--output PATH` | Save report to file |
 | `--fail-on-findings` | Exit with error if HIGH/CRITICAL found |
+| `--yara-mode` | Detection mode: `strict`, `balanced` (default), `permissive` |
+| `--custom-rules PATH` | Use custom YARA rules from directory |
+| `--disable-rule RULE` | Disable specific rule (can repeat) |
 
 ---
 
 ## Example Output
 
 ```
-$ skill-analyzer scan ./my-skill --use-behavioral
+$ skill-scanner scan ./my-skill --use-behavioral
 
 ============================================================
 Skill: my-skill

cisco_ai_skill_scanner-1.0.2/SECURITY.md

@@ -0,0 +1,57 @@
+# Security Policies and Procedures
+
+This document outlines security procedures and general policies for the
+`skill-scanner` project.
+
+- [Disclosing a security issue](#disclosing-a-security-issue)
+- [Vulnerability management](#vulnerability-management)
+- [Suggesting changes](#suggesting-changes)
+
+## Disclosing a security issue
+
+The `skill-scanner` maintainers take all security issues in the project
+seriously. Thank you for improving the security of `skill-scanner`. We
+appreciate your dedication to responsible disclosure and will make every effort
+to acknowledge your contributions.
+
+`skill-scanner` leverages GitHub's private vulnerability reporting.
+
+To learn more about this feature and how to submit a vulnerability report,
+review [GitHub's documentation on private reporting](https://docs.github.com/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability).
+
+Here are some helpful details to include in your report:
+
+- a detailed description of the issue
+- the steps required to reproduce the issue
+- versions of the project that may be affected by the issue
+- if known, any mitigations for the issue
+
+A maintainer will acknowledge the report within three (3) business days, and
+will send a more detailed response within an additional three (3) business days
+indicating the next steps in handling your report.
+
+If you've been unable to successfully draft a vulnerability report via GitHub
+or have not received a response during the alloted response window, please
+reach out via the [Cisco Open security contact email](mailto:oss-security@cisco.com).
+
+After the initial reply to your report, the maintainers will endeavor to keep
+you informed of the progress towards a fix and full announcement, and may ask
+for additional information or guidance.
+
+## Vulnerability management
+
+When the maintainers receive a disclosure report, they will assign it to a
+primary handler.
+
+This person will coordinate the fix and release process, which involves the
+following steps:
+
+- confirming the issue
+- determining affected versions of the project
+- auditing code to find any potential similar problems
+- preparing fixes for all releases under maintenance
+
+## Suggesting changes
+
+If you have suggestions on how this process could be improved please submit an
+issue or pull request.

{cisco_ai_skill_scanner-1.0.0 → cisco_ai_skill_scanner-1.0.2}/TESTING.md

@@ -1,6 +1,6 @@
 # Testing Guide
 
-This document covers testing requirements and procedures for contributing to the Skill Analyzer.
+This document covers testing requirements and procedures for contributing to the Skill Scanner.
 
 ## Quick Reference
 
@@ -9,7 +9,7 @@ This document covers testing requirements and procedures for contributing to the
 uv run pytest tests/ -v
 
 # Run tests with coverage
-uv run pytest tests/ --cov=skillanalyzer --cov-report=html
+uv run pytest tests/ --cov=skill_scanner --cov-report=html
 
 # Run evaluation benchmark
 uv run python evals/benchmark_runner.py
@@ -103,7 +103,7 @@ For detailed evaluation documentation, see [evals/README.md](/evals/README.md).
 
 ```bash
 # Generate HTML coverage report
-uv run pytest tests/ --cov=skillanalyzer --cov-report=html
+uv run pytest tests/ --cov=skill_scanner --cov-report=html
 
 # View report (opens in browser)
 open htmlcov/index.html  # macOS
@@ -123,7 +123,7 @@ xdg-open htmlcov/index.html  # Linux
 ```python
 # tests/test_example.py
 import pytest
-from skillanalyzer.core.scanner import SkillScanner
+from skill_scanner.core.scanner import SkillScanner
 
 class TestExampleFeature:
     """Tests for example feature."""

{cisco_ai_skill_scanner-1.0.0 → cisco_ai_skill_scanner-1.0.2}/docs/aidefense-analyzer.md

@@ -2,7 +2,7 @@
 
 ## Overview
 
-The AI Defense Analyzer integrates with Cisco AI Defense API to provide enterprise-grade security scanning for Claude Skills. It analyzes prompts, instructions, markdown content, and code files for threats including prompt injection, data exfiltration, and malicious patterns.
+The AI Defense Analyzer integrates with Cisco AI Defense API to provide enterprise-grade security scanning for Agent Skills. It analyzes prompts, instructions, markdown content, and code files for threats including prompt injection, data exfiltration, and malicious patterns.
 
 ## Features
 
@@ -56,23 +56,23 @@ echo "AI_DEFENSE_API_KEY=your_key" >> .env
 
 ```bash
 # Enable AI Defense analyzer
-skill-analyzer scan /path/to/skill --use-aidefense
+skill-scanner scan /path/to/skill --use-aidefense
 
 # Provide API key directly
-skill-analyzer scan /path/to/skill --use-aidefense --aidefense-api-key your_key
+skill-scanner scan /path/to/skill --use-aidefense --aidefense-api-key your_key
 
 # Combine with other analyzers
-skill-analyzer scan /path/to/skill --use-behavioral --use-llm --use-aidefense
+skill-scanner scan /path/to/skill --use-behavioral --use-llm --use-aidefense
 
 # Scan multiple skills
-skill-analyzer scan-all /path/to/skills --recursive --use-aidefense
+skill-scanner scan-all /path/to/skills --recursive --use-aidefense
 ```
 
 ### Python API
 
 ```python
-from skillanalyzer.core.analyzers import AIDefenseAnalyzer
-from skillanalyzer.core.loader import load_skill
+from skill_scanner.core.analyzers import AIDefenseAnalyzer
+from skill_scanner.core.loader import load_skill
 
 # Initialize analyzer with default rules
 analyzer = AIDefenseAnalyzer(
@@ -82,7 +82,7 @@ analyzer = AIDefenseAnalyzer(
 )
 
 # Initialize with custom rules
-from skillanalyzer.core.analyzers.aidefense_analyzer import DEFAULT_ENABLED_RULES
+from skill_scanner.core.analyzers.aidefense_analyzer import DEFAULT_ENABLED_RULES
 
 custom_rules = [
     {"rule_name": "Prompt Injection"},
@@ -112,8 +112,8 @@ findings = asyncio.run(scan_skill())
 ### Integration with Scanner
 
 ```python
-from skillanalyzer import SkillScanner
-from skillanalyzer.core.analyzers import StaticAnalyzer, AIDefenseAnalyzer
+from skill_scanner import SkillScanner
+from skill_scanner.core.analyzers import StaticAnalyzer, AIDefenseAnalyzer
 
 # Combine analyzers
 analyzers = [
@@ -169,7 +169,7 @@ For comprehensive coverage, combine AI Defense with other analyzers:
 
 ```bash
 # Maximum coverage
-skill-analyzer scan /path/to/skill \
+skill-scanner scan /path/to/skill \
     --use-behavioral \
     --use-llm \
     --use-aidefense \

{cisco_ai_skill_scanner-1.0.0 → cisco_ai_skill_scanner-1.0.2}/docs/api-rationale.md

@@ -1,8 +1,8 @@
 # API Server Rationale
 
-## Question: Is an API Server Necessary for Skill Analyzer?
+## Question: Is an API Server Necessary for Skill Scanner?
 
-Unlike MCP Scanner, which scans **remote MCP servers** (HTTP/SSE/stdio connections), Skill Analyzer scans **local skill packages** (files/directories). This raises the question: is an API server necessary?
+Unlike MCP Scanner, which scans **remote MCP servers** (HTTP/SSE/stdio connections), Skill Scanner scans **local skill packages** (files/directories). While an API server is less critical for Skill Scanner, it can provide additional support for CI/CD integration, web interfaces, service integrations, and batch processing. Read below for more details.
 
 ## Analysis
 
@@ -13,12 +13,12 @@ Unlike MCP Scanner, which scans **remote MCP servers** (HTTP/SSE/stdio connectio
 - API server enables scanning servers you don't control
 - Essential for the use case (scanning external services)
 
-**Skill Analyzer:**
+**Skill Scanner:**
 - Scans **local** skill packages (files/directories)
 - Skills are **always local** - there are no remote skills (unlike MCP servers)
 - Skills are distributed as ZIP files or directories that users install locally
 - Can be scanned directly via CLI or Python SDK
-- **Key Point**: Remote Claude Skills do not exist - skills are local file packages
+- **Key Point**: Remote skills do not exist - skills are local file packages
 
 ### Use Cases Where API is Valuable
 
@@ -95,9 +95,9 @@ Despite skills being local files, an API server provides value for:
 
 ## Conclusion
 
-**Critical Finding**: Remote Claude Skills **do not exist**. Skills are local file packages that users install on their machines, not remote services like MCP servers.
+**Critical Finding**: Remote skills **do not exist**. Skills are local file packages that users install on their machines, not remote services like MCP servers.
 
-While the API server is **less critical** for Skill Analyzer than for MCP Scanner (since there are no remote skills to scan), it still provides value for:
+While the API server is **less critical** for Skill Scanner than for MCP Scanner (since there are no remote skills to scan), it still provides value for:
 - CI/CD integration (uploading skill ZIP files)
 - Web interfaces (uploading skill packages)
 - Service integrations (HTTP-based workflows)