agentic-os-org/anolisa/code-scanner

Claude Code and agent skill by agentic-os-org/anolisa

Trust tier 2
  • community
LLM review pending
Source check pending

Checking that the SKILL.md file is still in the repository.

扫描 Bash / Python 代码片段中的安全风险,返回结构化 JSON 扫描结果。当用户要求检查代码安全性时使用。

Install

npx vskill@latest install agentic-os-org/anolisa/code-scanner

SKILL.md

Code Scanner

基于正则的轻量级代码安全扫描引擎,支持 Bash 和 Python,内置 25 条检测规则。

调用方式

bash
agent-sec-cli scan-code --code '<source_code>' --language <bash|python>

输入

参数类型必选说明
codestring是待扫描的源代码字符串,支持多行
languagestring是编程语言,取值:bash 或 python

输出

返回 JSON 格式的 ScanResult 对象:

字段类型说明
okbool扫描是否正常完成(无内部错误)
verdictstring最终判定,见下方 Verdict 说明
summarystring人类可读的扫描摘要
findingsFinding[]命中的规则列表,无命中时为空数组
languagestring输入的语言
engine_versionstring与 agent-sec-cli 版本一致
elapsed_msint扫描耗时(毫秒)
Finding 结构
字段类型说明
rule_idstring规则 ID,如 shell-recursive-delete
severitystring严重级别:warn / deny
desc_zhstring中文描述
desc_enstring英文描述
evidencestring[]匹配到的代码片段列表
Verdict 说明
值含义
pass未检测到安全风险
warn存在告警级风险,建议关注
deny存在阻断级风险,应阻止执行
error扫描引擎内部错误

Security

  • Security scanPassed, 100 of 100Pattern checks on the skill's files.
  • Model reviewNot runA model review is scheduled for the next rescan.

Quality evaluation

  • Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

Source

Popularity

7-day trend score
0

Not refreshed yet.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Codex
  • Gemini CLI
  • Cline
  • Amp
  • Roo Code
  • Goose
  • Continue
  • Kilo Code
  • Junie
  • Trae
  • OpenHands
  • Qwen Code
  • AI Agent
  • Tabnine Chat
  • Sourcegraph Cody
  • Amazon Q
  • Firebase Genkit
  • Sweep
  • Devin
  • Phind
  • Mentat
  • Claude Desktop
  • Aider
  • GPT Pilot
  • Plandex
  • bolt.new
  • v0
  • Replit Agent
  • Anse
  • TypingMind
  • BetterChatGPT
  • LibreChat
  • Warp AI
  • Pieces
  • Fig AI
Embed badge
vskill VERIFIED badge
[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/agentic-os-org/anolisa/code-scanner/badge)](https://verified-skill.com/skills/agentic-os-org/anolisa/code-scanner)

Something wrong with this skill or its page? Tell us.