skill-advisories

Open advisory database for AI agent skills, plugins, and MCP servers — OSV-style, machine-readable threat data for the agent ecosystem.

Browse advisories: https://akshay7273.github.io/skill-advisories/

Feed health: https://akshay7273.github.io/skill-advisories/health.html

Every advisory documents a malicious, vulnerable, or typosquatted agent skill, backed by at least one published public reference (vendor report, researcher writeup, or registry takedown).

Roadmap

The project is moving toward precise version-aware detection, verifiable threat feeds, OSV interoperability, and agent-native pre-install checks through MCP. See the public roadmap for milestones and acceptance criteria.

The feed (public API)

Consume the database directly — no install needed:

• Full feed: https://raw.githubusercontent.com/Akshay7273/skill-advisories/main/feed/feed.json
• Feed SHA-256 digest: https://raw.githubusercontent.com/Akshay7273/skill-advisories/main/feed/feed.json.sha256
• Fast lookup index (ecosystem:name → advisory ids): https://raw.githubusercontent.com/Akshay7273/skill-advisories/main/feed/index.json
• Compact feed: https://raw.githubusercontent.com/Akshay7273/skill-advisories/main/feed/compact.json
• Cursor-verified incremental update: https://raw.githubusercontent.com/Akshay7273/skill-advisories/main/feed/delta.json
• Advisory schema: schema/advisory.schema.json
• OSV-compatible index: feed/osv/index.json
• Multi-file checksum manifest: feed/checksums.txt
• Append-only publication history: feed/history.json

See the OSV export and verification guide for field mapping and integrity checks. Incremental consumers should follow the compact feed and delta protocol. References may carry archival evidence provenance, and every cited page is probed weekly for link rot. A downloaded copy can be checked against its own evidence with skill-advisories verify.

CLI

# Check specific skill names
npx @akshay7273/skill-advisories check omnicogg my-other-skill

# Avoid cross-ecosystem name collisions
npx @akshay7273/skill-advisories check --ecosystem mcp-server my-server

# Evaluate a specific installed version when an advisory lists affected versions
npx @akshay7273/skill-advisories check --ecosystem npm --version 1.2.3 my-package

# Check file hashes directly (catches renamed malware)
npx @akshay7273/skill-advisories check --sha256 <64-hex-digest>

# Turn typosquat proximity warnings into failures
npx @akshay7273/skill-advisories check omnicog --strict

# Scan installed skill directories (~/.claude/skills, ~/.openclaw/skills, ...)
npx @akshay7273/skill-advisories scan

# Scan with SARIF output for GitHub Code Scanning
npx @akshay7273/skill-advisories scan ./skills --format sarif

# Offline mode using cached feed (1h TTL default)
npx @akshay7273/skill-advisories scan --offline

# Set minimum failure threshold (low, medium, high, critical)
npx @akshay7273/s