--- title: "Skill scanner: review, setup & limitations · Undominated.ai" canonical: https://undominated.ai/skills/getsentry-skill-scanner/ description: "Audits a skill before install, with a bundled script and explicit confidence levels." --- # Skill scanner: review, setup & limitations · Undominated.ai > Audits a skill before install, with a bundled script and explicit confidence levels. [← Explore all skills](/skills/) SECURITY REVIEW / Sentry # Skill scanner Audits a skill before install, with a bundled script and explicit confidence levels. [See setup guidance ↓](#setup)[Original source ↗](https://github.com/getsentry/skills/tree/d18b7aa8ba878354e5c348310230e652f7690f9c/skills/skill-scanner) SOURCE REVIEW Reviewed 2026-10-15 Evidence 5 linked sources Publisher Sentry Licence [Apache-2.0 ↗](https://github.com/getsentry/skills/blob/d18b7aa8ba878354e5c348310230e652f7690f9c/LICENSE) Revision d18b7aa8ba87 [Read what was—and wasn’t—checked ↓](#review) “Scan agent skills for security issues. Use when asked to "scan a skill", "audit a skill", "review skill security", "check skill for injection", "validate SKILL.md", or assess whether an agent skill is safe to install. Checks for prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks.” [Sentry · upstream description ↗](https://github.com/getsentry/skills/blob/d18b7aa8ba878354e5c348310230e652f7690f9c/skills/skill-scanner/SKILL.md) Our analysis follows below. 01 / THE REASONING ## Why this made the selection. - A Bundled Script heading means the check is not only prose. - Confidence Levels and an output format are separate headings. ### A good fit for - Reviewing a skill before installing it - Separating a scanner finding from a confirmed exploit - Use mechanical findings as leads for a manual script, permission and supply-chain review - Review persistence through agent configuration and hooks alongside a skill's stated purpose. ### Weigh up before choosing - The bundled script was not executed in this review. - The inspected scanner traverses only immediate Markdown references and selected immediate script extensions for content scanning; nested or other-format payloads need manual review. - Structural recursion and pattern matching do not establish safe execution or complete dependency coverage. 02 / THE REVIEW RECORD ## What we actually inspected. Source review has boundaries. A clear record is more useful than a “safe” badge. ### Material inspected - skills/skill-scanner/SKILL.md - README.md - LICENSE - skills/skill-scanner/scripts/scan_skill.py ### Our findings - Headings include Bundled Script, Workflow and Confidence Levels. - README documents npx skills add getsentry/skills. - The scan_skill function was inspected: top-level definition, immediate references/scripts and separate structural checks feed the result. Unreadable referenced files can be skipped. - Frontmatter checks require name and description, compare name with the directory, and question unrestricted tools. - The behavioral-analysis section explicitly checks changes to agent instructions, memory, settings, MCP configuration, hooks, and auto-approval lists because those changes can persist after a skill is removed. ### Not established by this review - The skill was not executed inside a host agent. - Not executed: it was not installed or run. The review applies to the material and revision named here. A newer upstream release can change its behavior. 03 / PUT IT TO WORK ## Add a skill to your workflow. [Upstream setup instructions ↗](https://github.com/getsentry/skills/blob/d18b7aa8ba878354e5c348310230e652f7690f9c/README.md) DOCUMENTED COMMAND npx skills add getsentry/skills/skills/skill-scanner --skill skill-scanner Copy command ↗ Run in your terminal to choose your AI tools, project or global scope, and installation method. This short command follows the current upstream version; the review covers the revision shown above. Optional: install the reviewed revision Keeps the original source and installer version where recorded, while leaving your AI tools and installation scope for you to choose. npx skills@1.7.1 add https://github.com/getsentry/skills/tree/d18b7aa8ba878354e5c348310230e652f7690f9c/skills/skill-scanner --skill skill-scanner Copy reviewed-revision command ↗ - Choose your AI tools and project or global installation scope in Skills CLI. The review applies to the source revision shown on this page. - Retain all supporting files; separately configure companion skills, runtimes and service credentials named in the definition. - Review the resulting diff and use an isolated target before any migration, deployment, load test or warehouse operation. ### Before you start - uv and the full skill-scanner directory, including scripts and reference patterns. ### Compatibility Agent Skills-compatible hosts ### Local Markdown instructions - Read the installed skill files - Read skill files and run the local static scanner; do not execute the scanned skill to establish safety. ### Cost model Source is free to read under the stated licence. A host agent may charge for use. 04 / FOLLOW THE EVIDENCE ## The source trail. Our notes are separate from the original resource. Check upstream before adopting a new version. - [Skill definition ↗](https://github.com/getsentry/skills/blob/d18b7aa8ba878354e5c348310230e652f7690f9c/skills/skill-scanner/SKILL.md) Checked 2026-10-14 https://github.com/getsentry/skills/blob/d18b7aa8ba878354e5c348310230e652f7690f9c/skills/skill-scanner/SKILL.md Supports: Workflow and stated scope - [Repository licence ↗](https://github.com/getsentry/skills/blob/d18b7aa8ba878354e5c348310230e652f7690f9c/LICENSE) Checked 2026-10-07 https://github.com/getsentry/skills/blob/d18b7aa8ba878354e5c348310230e652f7690f9c/LICENSE Supports: Redistribution terms - [Install instructions ↗](https://github.com/getsentry/skills/blob/d18b7aa8ba878354e5c348310230e652f7690f9c/README.md) Checked 2026-10-07 https://github.com/getsentry/skills/blob/d18b7aa8ba878354e5c348310230e652f7690f9c/README.md Supports: Documented install path - [skills/skill-scanner/scripts/scan_skill.py ↗](https://github.com/getsentry/skills/blob/d18b7aa8ba878354e5c348310230e652f7690f9c/skills/skill-scanner/scripts/scan_skill.py) Checked 2026-10-14 https://github.com/getsentry/skills/blob/d18b7aa8ba878354e5c348310230e652f7690f9c/skills/skill-scanner/scripts/scan_skill.py Supports: review, limitations, access, install - [Pinned continuation review W05 ↗](https://raw.githubusercontent.com/getsentry/skills/d18b7aa8ba878354e5c348310230e652f7690f9c/skills/skill-scanner/SKILL.md) Checked 2026-10-15 https://raw.githubusercontent.com/getsentry/skills/d18b7aa8ba878354e5c348310230e652f7690f9c/skills/skill-scanner/SKILL.md Supports: review.findings, bestFor KEEP COMPARING ## Other approaches to consider. Related by category or shared topics. These are alternatives to inspect, not a measured quality order. [### GitHub Actions Security Review ↗ Reviews GitHub Actions for an external attacker, and withholds a finding that has no entry point, payload and execution path.](/skills/getsentry-gha-security-review/)[### Algorand vulnerability scanner ↗ Pins Trail of Bits' Algorand scanner, which treats a short or empty coverage table as an unfinished scan and does not let a clean Tealer run stand in for patterns it never examined.](/skills/trailofbits-algorand-vulnerability-scanner/)[### CodeQL ↗ Drives a CodeQL scan and warns that each Bash call is a fresh shell, so state must be written to files.](/skills/trailofbits-codeql/) [AI Tools ↗](/tools/)[Skills ↗](/skills/)[Agents ↗](/agents/)[MCP Servers ↗](/mcp-servers/)[Workflows ↗](/workflows/) ## Continue your investigation - [Choose a toolkit](/tools/) - [Inspect execution hosts](/agents/) - [Check tool access](/mcp-servers/) - [Check project dependencies](/check-repo/)