Skill Security Scan

$npx mdskill add aaronjmars/aeon/Skill Security Scan

Scans skills and workflows for security vulnerabilities and provides remediation

  • Audits code for injection, exfiltration, traversal, and prompt-override risks
  • Analyzes SKILL.md, CI workflows, and companion scripts for security flaws
  • Uses delta tracking, baseline suppression, and pattern matching to detect issues
  • Generates issue reports with per-finding remediation and code suggestions

SKILL.md

.github/skills/Skill Security ScanView on GitHub ↗

No skill content available yet.

More from aaronjmars/aeon

SkillDescription
Action Converter5 concrete real-life actions for today, leverage-scored against open loops with specificity and anti-fluff gates
Agent BuzzCurated AI-agent tweets, clustered into narratives with insight summaries
agent-displacementWeekly tracker of AI agent substitution signals — which roles, companies, and industries show real headcount displacement. Named roles + real deployments only.
AI Framework WatchWeekly competitive-intelligence digest on the AI agent framework space — momentum, releases, breaking changes across a curated watchlist
AIXBT PulseCross-domain market pulse from AIXBT's free grounding endpoint — crypto, macro, tradfi, geopolitics. Refreshes taxonomy references (clusters, chains) as a bonus.
api-health-probeDaily pre-batch API provider health check — detects credit exhaustion or auth failure for every configured provider key before the morning batch runs, giving the operator a window to act before skills degrade
Approval AuditList a wallet's live ERC-20 token approvals on Base and flag unlimited / risky spender grants. Keyless via Base RPC (eth_getLogs + eth_call) — no explorer key needed.
article-queueWeekly article idea synthesizer — ranks signals from topic-momentum, beat-tracker, and narrative-tracker into a prioritized queue the article skill reads on next run
atrium-catalog-watcherWeekly diff of the Atrium marketplace catalog at https://atriumhermes.tech/.well-known/skills/index.json against the prior snapshot — surfaces newly-published skills, removed skills, and updated descriptions. Supply-side complement to sparkleware-catalog (curated skill-packs.json registry) and skill-update-check (version drift of installed skills).
Auto MergeAutomatically merge open PRs that have passing CI, no blocking reviews, and no conflicts