A security scanner for AI agent skills that detects prompt injection, exfiltration, and supply-chain risks before install.