Securitysuite

这是AI Agent综合安全平台，含7个服务端点。核心功能包括：扫描文本注入风险，审计SKILL.md文件的恶意软件与范围问题，生成带风险评级和建议的安全报告，浏览攻击模式库，批量审计多个技能。适用于AI技能开发者排查隐患、批量评估风险。输入为JSON格式的文本或技能内容，输出为JSON格式的扫描/审计结果及报告。

mirni

热度 34.88

最近更新 2026-05-11 17:42:41

分类：安全依赖：代码执行 / 读写文件 / 第三方 API应用场景：报告撰写 / API 集成 / 自动化脚本

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add gh-securitysuite

Metadata

name: gh-securitysuite
description: Comprehensive agent security platform with 7 endpoints. Scan text for injection, audit SKILL.md files for malware and scope issues, generate detailed security reports with severity ratings and recommendations, browse the pattern catalog, or batch-audit multiple skills at once.
metadata: {"openclaw":{"emoji":"🏛️","requires":{"bins":["python"]},"install":[{"id":"pip","kind":"uv","packages":["fastapi","uvicorn","pydantic","pyyaml"]}]}}

SecuritySuite

Full security platform for AI agents. Seven endpoints, one server.

Start the server

uvicorn securitysuite.app:app --port 8010

Endpoints

Scan text for prompt injection

curl -s -X POST http://localhost:8010/v1/scan-text \
  -H "Content-Type: application/json" \
  -d '{"text": "What is the weather?"}' | jq

Audit a SKILL.md (full check)

curl -s -X POST http://localhost:8010/v1/audit \
  -H "Content-Type: application/json" \
  -d "{\"skill_content\": $(cat SKILL.md | jq -Rs)}" | jq

Generate a security report with recommendations

curl -s -X POST http://localhost:8010/v1/report \
  -H "Content-Type: application/json" \
  -d "{\"skill_content\": $(cat SKILL.md | jq -Rs)}" | jq

Returns overall_rating, risk_level (LOW/MEDIUM/HIGH/CRITICAL), summary, findings_by_severity, recommendations, and details (each finding with category, severity, description, and fix).

List all known attack patterns

curl -s http://localhost:8010/v1/patterns | jq '.patterns[] | "\(.severity): \(.name) — \(.description)"' -r

Batch audit multiple skills

curl -s -X POST http://localhost:8010/v1/batch \
  -H "Content-Type: application/json" \
  -d "{\"skills\": [$(cat skill1.md | jq -Rs), $(cat skill2.md | jq -Rs)]}" | jq

Returns results (verdict per skill), safe_count, and flagged_count.