WaelAbouceo

WaelAbouceo/vouch

Security scanner for AI-agent skills. Audit every SKILL.md on your machine for malware, prompt injection, and secret exfiltration — deterministic static analysis, plain-English, zero false alarms. Like npm audit / semgrep, but for agent skills.

0 stars 0 forks 0 watchers Python MIT License
agent-security ai-agents ai-security claude cli cursor developer-tools llm llm-security malware-detection mcp prompt-injection python sast security-scanner security-tools skill-security skills static-analysis supply-chain-security
View on GitHub Website
6 Open Issues Need Help Last updated: Sep 9, 2026

Open Issues Need Help

View All on GitHub
Docs: expand plain-English capability explanations 14 days ago
documentation good first issue
WaelAbouceo/vouch
0

Security scanner for AI-agent skills. Audit every SKILL.md on your machine for malware, prompt injection, and secret exfiltration — deterministic static analysis, plain-English, zero false alarms. Like npm audit / semgrep, but for agent skills.

Python
#agent-security#ai-agents#ai-security#claude#cli#cursor#developer-tools#llm#llm-security#malware-detection#mcp#prompt-injection#python#sast#security-scanner#security-tools#skill-security#skills#static-analysis#supply-chain-security
📣 Call for contributions — help make skill security accurate 14 days ago
help wanted good first issue
WaelAbouceo/vouch
0

Security scanner for AI-agent skills. Audit every SKILL.md on your machine for malware, prompt injection, and secret exfiltration — deterministic static analysis, plain-English, zero false alarms. Like npm audit / semgrep, but for agent skills.

Python
#agent-security#ai-agents#ai-security#claude#cli#cursor#developer-tools#llm#llm-security#malware-detection#mcp#prompt-injection#python#sast#security-scanner#security-tools#skill-security#skills#static-analysis#supply-chain-security
Audit discovery: support more agent skill directories 14 days ago
help wanted good first issue
WaelAbouceo/vouch
0

Security scanner for AI-agent skills. Audit every SKILL.md on your machine for malware, prompt injection, and secret exfiltration — deterministic static analysis, plain-English, zero false alarms. Like npm audit / semgrep, but for agent skills.

Python
#agent-security#ai-agents#ai-security#claude#cli#cursor#developer-tools#llm#llm-security#malware-detection#mcp#prompt-injection#python#sast#security-scanner#security-tools#skill-security#skills#static-analysis#supply-chain-security
Grow the labeled benchmark: add malicious evasion fixtures 14 days ago
help wanted good first issue benchmark
WaelAbouceo/vouch
0

Security scanner for AI-agent skills. Audit every SKILL.md on your machine for malware, prompt injection, and secret exfiltration — deterministic static analysis, plain-English, zero false alarms. Like npm audit / semgrep, but for agent skills.

Python
#agent-security#ai-agents#ai-security#claude#cli#cursor#developer-tools#llm#llm-security#malware-detection#mcp#prompt-injection#python#sast#security-scanner#security-tools#skill-security#skills#static-analysis#supply-chain-security
Grow the labeled benchmark: add benign-but-powerful skill fixtures 14 days ago
help wanted good first issue benchmark
WaelAbouceo/vouch
0

Security scanner for AI-agent skills. Audit every SKILL.md on your machine for malware, prompt injection, and secret exfiltration — deterministic static analysis, plain-English, zero false alarms. Like npm audit / semgrep, but for agent skills.

Python
#agent-security#ai-agents#ai-security#claude#cli#cursor#developer-tools#llm#llm-security#malware-detection#mcp#prompt-injection#python#sast#security-scanner#security-tools#skill-security#skills#static-analysis#supply-chain-security
New rule: PowerShell destructive delete of home/root (Windows analog of DES001) 14 days ago
help wanted good first issue new rule
WaelAbouceo/vouch
0

Security scanner for AI-agent skills. Audit every SKILL.md on your machine for malware, prompt injection, and secret exfiltration — deterministic static analysis, plain-English, zero false alarms. Like npm audit / semgrep, but for agent skills.

Python
#agent-security#ai-agents#ai-security#claude#cli#cursor#developer-tools#llm#llm-security#malware-detection#mcp#prompt-injection#python#sast#security-scanner#security-tools#skill-security#skills#static-analysis#supply-chain-security