Show HN: AcidTest – Security scanner for AI agent skills (opens in new tab)

(github.com)

1 pointscloudmanager1mo ago1 comments

1 comments

I built a CLI tool to scan AgentSkills (SKILL.md format) before installing them. Works with OpenClaw/ClawHub, Claude Code, Cursor, and any AgentSkills-compatible platform. Given the ClawHavoc campaign and reports of 26% of skills containing vulnerabilities, I wanted a quick gut check before installing anything.

It runs four analysis layers: permission audit, prompt injection detection, code analysis via TypeScript AST, and cross-reference checks for permission mismatches.

Zero config, zero API keys, one command: npx acidtest scan ./my-skill

https://github.com/currentlycurrently/acidtest

j / k navigate · click thread line to collapse

1 comments

cloudmanagerOP1mo ago

It runs four analysis layers: permission audit, prompt injection detection, code analysis via TypeScript AST, and cross-reference checks for permission mismatches.

Zero config, zero API keys, one command: npx acidtest scan ./my-skill

https://github.com/currentlycurrently/acidtest

j / k navigate · click thread line to collapse