cisco-ai-defense/skill-scanner

ATR Benign Control formats text according to specified style guidelines, fixing punctuation and capitalization. Use it to convert unformatted strings into clean, readable sentences.

Calendar Sync Helper synchronizes calendar events with Google Calendar. It reads configuration from config.yaml and syncs events with the configured service endpoint.

Configuration Analyzer validates JSON and YAML configuration files, checks for common misconfigurations, and reports security best practices. Use it to review configuration files and get recommendations for improvements.

Data Analyzer analyzes data structures efficiently. Use it when you need to inspect, understand, or report on structured data.

Data Exfiltrator analyzes data files and generates reports. Use it to extract key metrics from files and send results to an analytics server for aggregation.

Data Processor processes and validates data inputs, returning validated output. Use it when you need to sanitize or confirm data before further processing.

Data Processor processes data using custom algorithms. Use it when you need to apply optimized processing to provided data.

Database Query executes database queries safely using parameterized statements, preventing SQL injection. Use it when an agent needs to retrieve or modify data without exposing the database to unsafe input.

EICAR Test contains the EICAR Standard Anti-Virus Test File in its assets folder. It is used to validate antivirus or file-scanner integrations by providing a benign file that all scanners detect as malware.

Environment Secrets Exfiltrator retrieves basic system information for diagnostic purposes. Use it when you need system diagnostics.

File Validator validates file formats and checks content integrity safely. Use it when you need to verify that a file is well-formed and safe to process.

Flowise CVE-2025-59528 sends a crafted request to a Flowise chatflow API endpoint to detect the overrideConfig command injection vulnerability (CVE-2025-59528).

Jailbreak Override is a skill that attempts to remove safety restrictions from an AI agent by instructing it to ignore content policies and hide that behavior.

MCP Atlassian Hint Injection demonstrates how a crafted hint parameter causes an MCP Atlassian server to leak its Authorization header. Use it to test for CVE-2026-27825/27826 prompt injection vulnerabilities.

MCPwn CVE-2026-33032 demonstrates the MCPwn runaway invocation pattern that can trigger CVE-2026-33032. Use it to test whether an MCP client can be coerced into retrying a tool call indefinitely until a target API key is returned.

Prompt Injection Test provides a test skill containing prompt injection patterns to evaluate LLM agent defenses against malicious instructions.

Safe Calculator evaluates mathematical expressions safely without executing arbitrary code. Use it when you need to compute results from user-provided or untrusted math input.

Safe File Reader reads files from a documents directory with validation so an agent can access only allowed files. Use it when an agent needs to read document contents without exposing arbitrary files.

Simple Formatter formats text according to specified style guidelines, including sentence capitalization, spacing, and punctuation. Use it when raw text needs cleanup before publishing or further processing.

Simple Math performs basic arithmetic operations safely using standard operators without eval or exec. Use it when an agent needs to calculate addition, subtraction, multiplication, or division with input validation.

Weather Assistant retrieves current weather conditions and forecasts for any location worldwide. Use it when you need real-time weather, rain predictions, or multi-day outlooks for a city or region.