secureai-scan

Use when the user asks to scan a repo for AI/LLM security issues, wants to know "is this skill safe?" before installing an Agent Skill, needs to "scan my MCP config" or check an MCP server before trusting it, asks about prompt injection / tool poisoning / RAG poisoning risk in their code, or is about to install any MCP server or Claude Skill from GitHub, npm, or an untrusted link. Runs the secureai-scan CLI offline…