skillscan v0.1.0 (pre-rename)

Note: the project was renamed to skillfrisk in 0.2.0. The skillscan install commands below no longer work — use pip install skillfrisk (latest release).

First release: static security scanner for AI-agent skills and MCP servers.

• 8 rule classes: prompt injection, secret access/exfiltration, remote code execution, destructive commands, dangerous MCP permissions, Python AST checks (dynamic exec, shell=True), wildcard permissions
• Terminal, JSON and HTML reports; exit code 2 on high findings for CI gating
• Install: pipx install git+https://github.com/Topicspot/skillscan or run via uvx
• Agent skill: npx skills add Topicspot/skillscan
• GitHub Action: uses: Topicspot/skillscan@main
• Docker image build included
• False-positive regression corpus of popular real-world skills