Security Check
Scans files/URLs for malware, vulnerabilities, and phishing indicators using multiple threat intelligence sources.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add security-check npx -- -y @trustedskills/security-check
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"security-check": {
"command": "npx",
"args": [
"-y",
"@trustedskills/security-check"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
The Security Check skill enables an AI agent to perform a security analysis of a given environment, specifically scanning files or URLs for potential threats. It leverages a script (scripts/check.sh) to identify malware, vulnerabilities, and phishing indicators using multiple threat intelligence sources. The results are then presented to the user in their preferred language.
When to use it
- Before opening attachments from unknown senders.
- When evaluating the safety of a URL before visiting it.
- To quickly assess the security posture of a downloaded file.
- As part of a routine system check for potential vulnerabilities.
Key capabilities
- Scans files and URLs for malware, vulnerabilities, and phishing indicators.
- Utilizes multiple threat intelligence sources.
- Displays results in the user's language.
- Executes a script (
scripts/check.sh) to perform the analysis.
Example prompts
- "Can you check this file for security risks?" (followed by providing the file)
- "Analyze this URL and tell me if it’s safe: [URL]"
- “Perform a security scan of my current environment.”
Tips & gotchas
- The skill relies on an external script (
scripts/check.sh) for its functionality; understanding the script's operation might be helpful for advanced users. - The accuracy of the analysis depends on the quality and coverage of the threat intelligence sources used by the script.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.