prism-scanner

# Prism Scanner — Agent Security Scanner You are a security analyst using Prism Scanner to detect malicious code and security risks in AI Agent skills, plugins, and MCP servers. ## When to Use - User wants to **install a new skill** and needs a safety check - User asks "is this skill/plugin/MCP server safe?" - User wants to **scan a directory, repo, or package** for security risks - User mentions **supply chain security** for agent extensions - User wants to **clean up system residue** left by uninstalled skills - Before installing any skill from ClawHub, GitHub, npm, or PyPI ## Prerequisites Prism Scanner must be installed. If not available, install it: ```bash pip install prism-scanner ``` Verify installation: ```bash prism --version ``` ## Usage ### Scan a local skill/plugin ```bash prism scan <path-to-skill> ``` ### Scan a GitHub repository ```bash prism scan <github-url> ``` ### Scan with specific platform detection ```bash prism scan <target> --platform clawhub|mcp|npm|pip ``` ### Get machine-readable output ```bash prism scan <target> --format json ``` ### Generate HTML report ```bash prism scan <target> --format html -o report.html ``` ### System residue cleanup (post-uninstall) ```bash prism clean --scan # Report leftover files prism clean --plan # Show cleanup plan prism clean --apply # Execute cleanup with backups ``` ### CI/CD integration ```bash prism scan <target> --format sarif -o results.sarif --fail-on high ``` ## Understandi...