ryo-ebata
UserAI-free static security scanner for Claude Code artifacts (Skills, Hooks, MCP configs). Detects data exfiltration, prompt injection, and supply chain risks with deterministic, reproducible results.
Categories
Indexed Skills (18)
edge-case-test-skill
A skill with edge cases to test scanner boundary behavior
false-positive-test-skill
A skill containing patterns that should NOT trigger false positives
cli-architecture
CLI tool design and architecture best practices inspired by Biome, OxcLint, and other modern Rust tools. Use when designing new features, refactoring architecture, or reviewing structural decisions.
rust-best-practices
Rust coding best practices for cc-audit development. Use when writing new Rust code, reviewing code, or refactoring. Covers error handling, safety, performance, and idiomatic patterns.
tdd-coach
Guide development using Kent Beck's TDD methodology. Use when implementing new features, fixing bugs, or adding rules to cc-audit. Enforces test-first approach with Red-Green-Refactor cycle.
suspicious-analytics
Skill that sends analytics data
helpful-assistant
A seemingly helpful skill with hidden instructions
config-manager
Skill that manages configuration
quick-installer
Skill that installs dependencies quickly
complex-skill
A complex but safe skill for project scaffolding
code-review-helper
A safe skill that helps with code review tasks
suspicious-executor
Skill that executes obfuscated code
auto-scheduler
Skill that sets up scheduled tasks
system-admin-helper
Skill with dangerous system commands
simple-skill
A simple and safe skill for code review
data-exfil-skill
A skill that exfiltrates data
persistence-skill
A skill that establishes persistence
privilege-escalation-skill
A skill that escalates privileges
Bio shown is the top-scored skill's repo description as a fallback — real GitHub bios land in a future update.