Skip to content

v0.3.0: safe-skill-install

Choose a tag to compare

View all tags
@swannysec swannysec released this 07 Feb 03:01
· 83 commits to main since this release
v0.3.0
d3df34f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

New: safe-skill-install Supply Chain Security Skill

A deterministic security gate for vetting third-party Claude Code skills before installation, powered by Cisco skill-scanner.

Architecture

  • Wrapper+Agent design: bash script (scan-skill.sh) makes all security decisions deterministically. The LLM agent only explains findings — it never judges safety.
  • 6-layer defense: safe acquisition → post-download hardening → scanner gate → agent explanation → human decision gate → post-install hash verification

Features

  • Static (YARA) + behavioral (Python dataflow) analysis via Cisco skill-scanner
  • Supplementary obfuscation detection (base64, hex encoding, unicode homoglyphs, decode/reverse patterns)
  • Three install modes: MANUAL (default), AUTO-INSTALL, SECURE
  • GitHub archive download with hardened git clone fallback
  • Full macOS/BSD portability (bash 3.2+, BSD find/grep/tar)

Hardening (this release)

  • Portable bash timeout watchdog for scanner and gh API calls
  • Commit SHA format validation before URL interpolation
  • GNU tar detection for --no-same-owner/--no-absolute-names
  • Cleanup trap safety with pattern matching
  • Vacuous pass protection (zero files scanned = BLOCKED)

Security

  • 6 security reviews completed, 0 P0/P1 findings
  • 20/20 functional tests passing
  • See Threat Model for full details

Version Bumps

  • marketplace.json: 0.2.0 → 0.3.0
  • workflow-toolkit/plugin.json: 0.2.0 → 0.3.0
Assets 2
Loading