SkillHawk v0.2.1 — Node 24 compatibility

Maintenance release: migrate the JavaScript Action runtime to Node 24, update GitHub workflow dependencies, keep CI coverage across Node 20/22/24, and retain the self-scan benchmark ignore fix.

SkillHawk v0.2.0 — SARIF & GitHub Code Scanning

SkillHawk v0.2.0

Major security integration update.

New

• SARIF output support
• GitHub Code Scanning compatible results
• --sarif CLI output
• Improved GitHub Action metadata
• Improved Marketplace discoverability
• Updated tests and documentation

SkillHawk can now integrate its security findings with GitHub's native security workflow.

SkillHawk v0.1.1 — GitHub Marketplace Release

SkillHawk v0.1.1

SkillHawk is a zero-dependency security scanner for AI Agent Skills, SKILL.md files, MCP configurations, and agent instructions.

What it detects

• Remote downloads piped directly into a shell
• Credential and SSH key access
• Destructive filesystem commands
• Privilege escalation
• Suspicious outbound uploads
• Prompt-injection style instructions
• Dynamic shell execution
• Unpinned npx execution
• Broad recursive file access

Usage

- uses: Berserk-hub150/skillhawk@v0.1.1
  with:
    path: .
    fail-on: high

SkillHawk v0.1.0 — First public release

Full Changelog: https://github.com/Berserk-hub150/skillhawk/commits/v0.1.0