honeybadger

仓库创建 2026年4月5日最近提交 21 天前SkillHot 收录 21 天前

▸ 精选理由

安装前的快速安全把关，减少供应链风险

▸ 风险提示

会克隆/访问仓库并联网，可能产生误报

这个 Skill 做什么

为 GitHub/GitLab 仓库做安全扫描，检测硬编码密钥、已知 CVE 与供应链风险。

在把 GitHub/GitLab 仓库装到机器或当作依赖前先做一次安全体检：找硬编码密钥、已知 CVE、供应链风险和构建溯源问题。适合有人问“这仓库能装吗/安全吗？”或想在安装前做风控时使用。它不仅列漏洞，还能检测 secrets 和构建可追溯性，提供更全面的风险判断。

▸ 展开 SKILL.md 英文原文

Scan a GitHub or GitLab repository for security issues before installing it as a skill, tool, or MCP server. Use when the user wants to check, vet, scan, or review a repository for safety before installation. Detects hardcoded secrets, known CVEs, supply chain risks, and build provenance.

开发编程安全扫描代码审计密钥检测通用

Stars

Forks

仓库内 Skill

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/famclaw/honeybadger/main/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/famclaw/honeybadger/main/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# HoneyBadger

HoneyBadger is a security scanner for software plugins. Before anything gets
installed on your family server or development machine, HoneyBadger checks it.

**HoneyBadger don't care. HoneyBadger checks anyway.**

## When to use this skill

Use this skill when the user:
- Wants to install a skill, MCP server, or tool from a GitHub or GitLab repo
- Asks "is this safe to install?", "can you check this?", "vet this repo"
- Wants to verify an update to an already-installed skill
- Asks about the security of any GitHub or GitLab repository

## Prerequisites

The `honeybadger` binary must be in PATH. If not installed:

```bash
go install github.com/famclaw/honeybadger/cmd/honeybadger

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有