A security scanner for AI agent skills that detects vulnerabilities, prompt injection, data exfiltration, and supply-chain risks, producing scored reports before installation for developers.