Prism Scanner

Security scanner for AI Agent skills, plugins, and MCP servers. Use when: user asks to scan a skill, check if a plugin is safe, vet an MCP server, review skill security, detect malicious code, supply chain safety, or says 'is this safe to install', 'scan this skill', 'check this MCP server', 'security scan', 'vetting', 'skill safety', 'prism scan', '安全扫描', '这个插件安全吗', '扫描一下', '检查安全性', '安装前检查', '技能审查'.

28 stars 4 forksSecurity

Install

skills CLI (Claude Code, Cursor, Codex and more)

npx skills add aidongise-cell/prism-scanner --skill prism-scanner

Manual install

git clone --depth 1 https://github.com/aidongise-cell/prism-scanner.git /tmp/prism-scanner
mkdir -p ~/.claude/skills
cp -r /tmp/prism-scanner/. ~/.claude/skills/prism-scanner

Personal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.

From the SKILL.md

# Prism Scanner — Agent Security Scanner

You are a security analyst using Prism Scanner to detect malicious code and security risks in AI Agent skills, plugins, and MCP servers.

## When to Use

- User wants to **install a new skill** and needs a safety check
- User asks "is this skill/plugin/MCP server safe?"
- User wants to **scan a directory, repo, or package** for security risks
- User mentions **supply chain security** for agent extensions
- User wants to **clean up system residue** left by uninstalled skills
- Before installing any skill from ClawHub, GitHub, npm, or PyPI

## Prerequisites

Prism Scanner must be installed. If not available, install it:

```bash
pip install prism-scanner
```

Verify installation:
```bash
prism --version
```

## Usage

### Scan a local skill/plugin

```bash
prism scan <path-to-skill>
```

### Scan a GitHub repository

```bash
prism scan <github-url>
```

### Scan with specific platform detection

```bash
prism scan <target> --platform clawhub|mcp|npm|pip
```

### Get machine-readable output

```bash
prism scan <target> --format json
```

### Generate HTML report

```bash
prism scan <target> --format html -o report.html
```

### System residue cleanup (post-uninstall)

```bash
prism clean --scan     # Report leftover files
prism clean --plan     # Show cleanup plan
prism clean --apply    # Execute cleanup with backups
```

### CI/CD integration

```bash
prism scan <target> --format sarif -o results.sarif --fail-on high
```

Read the full skill on GitHub

Details

Skill name: prism-scanner
Repository: aidongise-cell/prism-scanner
License: Apache-2.0
Repo updated: 7 April 2026

FAQ

What does the Prism Scanner skill do?

How do I install the Prism Scanner skill?

skills CLI (Claude Code, Cursor, Codex and more): npx skills add aidongise-cell/prism-scanner --skill prism-scanner. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.

Is Prism Scanner popular?

It lives in aidongise-cell/prism-scanner, which has 28 GitHub stars and 4 forks.

Related skills

Pentest Tool

Jumbo-WJB/pentest-skills

Autonomous penetration testing framework. Claude acts as offensive security expert with independent decision-making. Provides methodology and principles, not command scripts. ALL commands must execute in kali-pentest container via 'docker exec kali-pentest <tool>'.

Security

R00 BehiSecc Awesome Claude Skills Security

freewaychameleonnode/r17-behisecc-awesome-claude-skills-security

🔒 Security & Compliance skill suite derived from BehiSecc/awesome-claude-skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.

Security

Slopsec

lachydotmcg/slopsec

Security audit and hardening for vibe-coded SaaS apps. Use when reviewing, securing, hardening, or pen-testing an app — especially AI-generated / vibe-coded / "shipped fast" projects (Next.js, Supabase, Firebase, Express, serverless). Triggers: "is my app secure", "security review", "harden this", "check for vulnerabilities", "I'm about to launch", "audit before deploy", "exposed secrets", "leaked API keys", "before I ship". Walks the 50 most common ways vibe-coded apps get owned and produces a prioritized fix list.

Security

R00 Glebis Claude Skills Security

lavendertalesun/r20-glebis-claude-skills-security

🔒 Security & Compliance skill suite derived from glebis/claude-skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.

Security

Move Auditor

pantheraudits/move-auditor

Audits Move contracts (Sui & Aptos) for security bugs.

Security

R00 Borghei Claude Skills Security

InnerPrawn98/r14-borghei-claude-skills-security

🔒 Security & Compliance skill suite derived from borghei/Claude-Skills. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.

Security

Browse the most popular Claude skills, all security skills, or write your own with the skills generator.