Identify criteria for classifying whether a skill is malicious.
npx skills add https://github.com/yonglunyao/skill-analyse-plugin --skill standard-yonglunyao
Please help me install this Agent Skill. Skill: standard Source: https://github.com/yonglunyao/skill-analyse-plugin/tree/main/skills/standard Command: npx skills add https://github.com/yonglunyao/skill-analyse-plugin --skill standard-yonglunyao
This standard documents the criteria and methods used to determine if a skill is malicious, enabling consistent security analysis and governance.
Run the security standard evaluation on a skill to classify its risk levels and categories.
High-intent search queries and answers about installing and using this skill.
Skill security assessment outcomes are standardized by defining risk levels, detection categories, and a scoring algorithm. This enables consistent security analysis and governance by providing evidence-based decision criteria for policy enforcement.
Evaluate skill risk levels by applying the standard's scoring algorithm and detection categories during security audits. This classifies risks and provides evidence-based decisions for policy enforcement and training.
Yes, this standard supports security policy enforcement by providing evidence-based decisions for risk management. It applies to skill evaluation scenarios, enabling teams to understand risk levels and detection categories.
The scoring algorithm is an operational requirement defined in the standard document. It works with risk levels and detection categories to classify malicious skills and guide security audits.
No dependencies are required to apply the skill security standard. The standard document provides the necessary definitions for risk levels, detection categories, and the scoring algorithm to classify risks.
ripgraphicsAnalyze infrastructure and apply solutions for DevOps operational issues.
yezannnnnAutomate security scans, risk scoring, and compliance reporting for software projects.
yi-john-huangAutomate OWASP-aligned security audits across code repositories, APIs, and deployment pipelines.
dreadnodeFilter low-quality and false positive vulnerability findings from scanners and agent output.
