v0.3.0

Full Changelog: v0.2.4...v0.3.0

v0.2.4

Full Changelog: v0.2.3...v0.2.4

v0.2.3

Full Changelog: v0.2.2...v0.2.3

v0.2.2

Full Changelog: v0.2.1...v0.2.2

v0.2.1

What's Changed

• chore: add project URLs so PyPI links back to the repo by @Topicspot in #2
• Release 0.2.1: PyPI project links and changelog by @Topicspot in #3

New Contributors

• @Topicspot made their first contribution in #2

Full Changelog: v0.2.0...v0.2.1

skillfrisk v0.2.0

Renamed from skillscan to skillfrisk and published to PyPI.

pip install skillfrisk      # or: uvx skillfrisk scan .
skillfrisk scan ./skills

• The CLI command is now skillfrisk (was skillscan).
• First release on PyPI: https://pypi.org/project/skillfrisk/
• Regression corpus expanded from 3 to 10 real anthropics/skills skills (92 files); fixed the false positives this exposed in OBFUSCATION, PY_DYNAMIC_EXEC and SECRET_ACCESS.
• Added a reproducible benchmark harness (benchmarks/run.py) with pinned versions of cisco-ai-skill-scanner and SkillSpector, plus recorded results.
• Agent skill install: npx skills add Topicspot/skillfrisk — GitHub Action: uses: Topicspot/skillfrisk@v0.2.0

Full changelog: https://github.com/Topicspot/skillfrisk/blob/main/CHANGELOG.md

skillscan v0.1.0 (pre-rename)

Note: the project was renamed to skillfrisk in 0.2.0. The skillscan install commands below no longer work — use pip install skillfrisk (latest release).

First release: static security scanner for AI-agent skills and MCP servers.

• 8 rule classes: prompt injection, secret access/exfiltration, remote code execution, destructive commands, dangerous MCP permissions, Python AST checks (dynamic exec, shell=True), wildcard permissions
• Terminal, JSON and HTML reports; exit code 2 on high findings for CI gating
• Install: pipx install git+https://github.com/Topicspot/skillscan or run via uvx
• Agent skill: npx skills add Topicspot/skillscan
• GitHub Action: uses: Topicspot/skillscan@main
• Docker image build included
• False-positive regression corpus of popular real-world skills