basitalisandhu

basitalisandhu/skill-scan-gate

CI gate for Claude Code skills and plugins: scans a skills or plugin repository for instruction-override text, exfiltration patterns, dangerous hook commands, unpinned MCP servers and secret-shaped strings, writes SARIF for code scanning, and fails the build above your threshold. GitHub Action and CLI.

9 good first / help-wanted issues · Python · last activity Oct 4, 2026

agent-security agent-skills ai-security ci claude-code claude-code-plugins claude-code-skills code-scanning devsecops github-actions hacktoberfest hooks mcp prompt-injection python sarif secret-scanning supply-chain-security
9 Open Issues Need Help Last updated: Oct 4, 2026

Open Issues Need Help

View All on GitHub
help wanted good first issue hacktoberfest
basitalisandhu/skill-scan-gate
0

CI gate for Claude Code skills and plugins: scans a skills or plugin repository for instruction-override text, exfiltration patterns, dangerous hook commands, unpinned MCP servers and secret-shaped strings, writes SARIF for code scanning, and fails the build above your threshold. GitHub Action and CLI.

Python
#agent-security#agent-skills#ai-security#ci#claude-code#claude-code-plugins#claude-code-skills#code-scanning#devsecops#github-actions#hacktoberfest#hooks#mcp#prompt-injection#python#sarif#secret-scanning#supply-chain-security
help wanted good first issue hacktoberfest
basitalisandhu/skill-scan-gate
0

CI gate for Claude Code skills and plugins: scans a skills or plugin repository for instruction-override text, exfiltration patterns, dangerous hook commands, unpinned MCP servers and secret-shaped strings, writes SARIF for code scanning, and fails the build above your threshold. GitHub Action and CLI.

Python
#agent-security#agent-skills#ai-security#ci#claude-code#claude-code-plugins#claude-code-skills#code-scanning#devsecops#github-actions#hacktoberfest#hooks#mcp#prompt-injection#python#sarif#secret-scanning#supply-chain-security
help wanted hacktoberfest
basitalisandhu/skill-scan-gate
0

CI gate for Claude Code skills and plugins: scans a skills or plugin repository for instruction-override text, exfiltration patterns, dangerous hook commands, unpinned MCP servers and secret-shaped strings, writes SARIF for code scanning, and fails the build above your threshold. GitHub Action and CLI.

Python
#agent-security#agent-skills#ai-security#ci#claude-code#claude-code-plugins#claude-code-skills#code-scanning#devsecops#github-actions#hacktoberfest#hooks#mcp#prompt-injection#python#sarif#secret-scanning#supply-chain-security
enhancement help wanted good first issue
basitalisandhu/skill-scan-gate
0

CI gate for Claude Code skills and plugins: scans a skills or plugin repository for instruction-override text, exfiltration patterns, dangerous hook commands, unpinned MCP servers and secret-shaped strings, writes SARIF for code scanning, and fails the build above your threshold. GitHub Action and CLI.

Python
#agent-security#agent-skills#ai-security#ci#claude-code#claude-code-plugins#claude-code-skills#code-scanning#devsecops#github-actions#hacktoberfest#hooks#mcp#prompt-injection#python#sarif#secret-scanning#supply-chain-security
help wanted good first issue hacktoberfest
basitalisandhu/skill-scan-gate
0

CI gate for Claude Code skills and plugins: scans a skills or plugin repository for instruction-override text, exfiltration patterns, dangerous hook commands, unpinned MCP servers and secret-shaped strings, writes SARIF for code scanning, and fails the build above your threshold. GitHub Action and CLI.

Python
#agent-security#agent-skills#ai-security#ci#claude-code#claude-code-plugins#claude-code-skills#code-scanning#devsecops#github-actions#hacktoberfest#hooks#mcp#prompt-injection#python#sarif#secret-scanning#supply-chain-security
help wanted good first issue hacktoberfest claimed
basitalisandhu/skill-scan-gate
0

CI gate for Claude Code skills and plugins: scans a skills or plugin repository for instruction-override text, exfiltration patterns, dangerous hook commands, unpinned MCP servers and secret-shaped strings, writes SARIF for code scanning, and fails the build above your threshold. GitHub Action and CLI.

Python
#agent-security#agent-skills#ai-security#ci#claude-code#claude-code-plugins#claude-code-skills#code-scanning#devsecops#github-actions#hacktoberfest#hooks#mcp#prompt-injection#python#sarif#secret-scanning#supply-chain-security
help wanted good first issue hacktoberfest claimed
basitalisandhu/skill-scan-gate
0

CI gate for Claude Code skills and plugins: scans a skills or plugin repository for instruction-override text, exfiltration patterns, dangerous hook commands, unpinned MCP servers and secret-shaped strings, writes SARIF for code scanning, and fails the build above your threshold. GitHub Action and CLI.

Python
#agent-security#agent-skills#ai-security#ci#claude-code#claude-code-plugins#claude-code-skills#code-scanning#devsecops#github-actions#hacktoberfest#hooks#mcp#prompt-injection#python#sarif#secret-scanning#supply-chain-security
help wanted good first issue hacktoberfest
basitalisandhu/skill-scan-gate
0

CI gate for Claude Code skills and plugins: scans a skills or plugin repository for instruction-override text, exfiltration patterns, dangerous hook commands, unpinned MCP servers and secret-shaped strings, writes SARIF for code scanning, and fails the build above your threshold. GitHub Action and CLI.

Python
#agent-security#agent-skills#ai-security#ci#claude-code#claude-code-plugins#claude-code-skills#code-scanning#devsecops#github-actions#hacktoberfest#hooks#mcp#prompt-injection#python#sarif#secret-scanning#supply-chain-security
basitalisandhu/skill-scan-gate
0

CI gate for Claude Code skills and plugins: scans a skills or plugin repository for instruction-override text, exfiltration patterns, dangerous hook commands, unpinned MCP servers and secret-shaped strings, writes SARIF for code scanning, and fails the build above your threshold. GitHub Action and CLI.

Python
#agent-security#agent-skills#ai-security#ci#claude-code#claude-code-plugins#claude-code-skills#code-scanning#devsecops#github-actions#hacktoberfest#hooks#mcp#prompt-injection#python#sarif#secret-scanning#supply-chain-security