GuardSkills

63 posts

GuardSkills banner
GuardSkills

GuardSkills

@guardskills_

Security-first dev building guardskills – a CLI guardrail that scans skills for malicious patterns and blocks unsafe installs before they hit your supply

Katılım Temmuz 2020
9 Takip Edilen31 Takipçiler
Sabitlenmiş Tweet
GuardSkills
GuardSkills@guardskills_·
Build fast. Install safely. 🔒
Chris@Chrisondesk

🚀 1,000+ Downloads and Growing! @guardskills_ has officially crossed 1,000 downloads 🎉 What started as a simple idea, helping developers inspect skills before installing them, is now being used by 1,000+ developers who care about security and code transparency. In an ecosystem where installing third-party skills is easy, verifying them should be easier. Guardskills scans skill packages before installation so you can: •Detect suspicious patterns •Avoid hidden malicious behavior •Stay in control of what runs in your environment This is just the beginning. Next milestone: 5,000. Supports scanning of skills from: 1. Skills[.]SH 2. Clawhub 3. Github 4. Playbook 5. Openskills Build fast. Install safely.

English
0
0
0
262
GuardSkills
GuardSkills@guardskills_·
@imdhiva @HeyNikhila @claudeai People are installing Skills from everywhere now. GitHub, marketplaces, random links. That’s exactly why @guardskills_ matters. Just run: npx guardskills skills add ... It checks the Skill for risk before the actual install happens.
English
0
0
1
29
Dhiva Logu
Dhiva Logu@imdhiva·
1. Go to skills.sh and install skills relevant to your everyday use case. 2. Always use /frontend-design-skill when working on UI. Claude creates better UI 3. Try using it inside agent orchestrators 4. Connect MCPs of products or workflows you use/need 5. If you feel you are repeating a same thing multiple times, create them as skill/command. Ask claude to do it
English
2
0
2
175
HeyNikhila
HeyNikhila@HeyNikhila·
switched from cursor to @claudeai code... Been a long-term user of cursor, but the bills went too high...like $250 p/m So switching to Claude code... ✅ First commit done... Loving it so far... Any pro tip for 1st timer claude code user?
HeyNikhila tweet media
English
1
0
2
216
GuardSkills
GuardSkills@guardskills_·
@iannuttall @martindonadieu One unsafe Skill is all it takes. If you install Skills from online sources, use @guardskills_ before your normal command. Example: npx guardskills skills add ... It scans first and only lets the process continue based on the result.
English
0
0
0
2
Ian Nuttall
Ian Nuttall@iannuttall·
playbooks.com is costing me $300/mo now in cloudflare r2 storage back in the red! i may need to close it down or sell it :/
English
41
0
61
28.9K
GuardSkills
GuardSkills@guardskills_·
@washedmax @b_nnett The Skills ecosystem is growing fast, but so is the risk. A malicious Skill can steal your keys, break your environment, or compromise your workflow. Use @guardskills_ like this: npx guardskills skills add ... Scan first. Then install with confidence.
English
0
0
0
77
Bennett
Bennett@b_nnett·
Is there a skills marketplace / App Store?
English
1
0
1
423
GuardSkills
GuardSkills@guardskills_·
@JGrandillon Before you install a Skill, ask yourself: Do you actually trust it? With @guardskills_, you don’t have to guess. npx guardskills skills add ... It scans the Skill before installation and tells you whether it looks safe.
English
0
0
0
4
Jérémy Grandillon
Jérémy Grandillon@JGrandillon·
Claude Code is becoming inevitable. 90% of sales & marketing teams haven't touched it yet. I spent weeks testing resources to find what actually matters for revenue teams. Here's the full breakdown:
Jérémy Grandillon tweet media
English
1
0
1
64
GuardSkills
GuardSkills@guardskills_·
@gaurang_itis Do you install skills a lot? Then you need @guardskills_. There are lots of skills online, and you don’t know which ones have malware. Installing them can get your keys stolen. Just add guardskills before your skills command: eg: npx guardskills skills add… It scans first!!
English
1
0
1
23
GuardSkills
GuardSkills@guardskills_·
@rabi_guha @xdalist If you use a lot of skills, you’ll need to use @guardskills_. There are many skills available online, and you don’t know which ones contain malware. Installing them can steal your keys. Simply add guardskills before your skills command: For example: npx guardskills skills add…
English
0
0
0
20
Rabi Shanker Guha
Rabi Shanker Guha@rabi_guha·
We built a better alternative to json-render & A2UI Up to 3x faster rendering & 67% fewer tokens. Far fewer broken outputs. We've been shipping Generative UI interfaces to 10,000+ developers for the past year. We know where JSON-based rendering breaks in production. So we built a new format - one that works with how models actually generate, not against it. And today we're open sourcing it: openui [dot] com
English
57
51
996
101.1K
GuardSkills
GuardSkills@guardskills_·
@jaykch @rezoundous You install skills a lot? Then you need @guardskills_. There are lot of skills online, you don’t which has malware, installing them can steal your keys. Just add guardskills before your skills cmd eg: npx guardskills skills add… It scans first and then allow based on result
English
0
0
0
34
Jay
Jay@jaykch·
@rezoundous do you use claude more than codex? personally not hitting any limits on claude, but I optimize context a lot and have installed a lot of skills.sh
English
2
0
17
2.2K
Tyler
Tyler@rezoundous·
I have Codex $20 and Claude $100 plan. Somehow I hit limits on Claude regularly and never on the Codex...
English
281
46
2.7K
334.3K
GuardSkills
GuardSkills@guardskills_·
@JustinPerea @alex_prompter You install AI skills without thinking. But have you checked what's in that code? Your API keys are at risk. @guardskills_ scans for malicious code before you install. Protect your keys. Before install any skills, scan it with @guardskills_
English
0
0
0
266
Alex Prompter
Alex Prompter@alex_prompter·
This is AMAZING.. someone just built an App Store for Claude Code. It's called SkillsMP and there are 200,000+ agent skills that teach your AI exactly how to write PPTX files, review PRs, deploy to cloud, analyze data, and more. 100% Opensource. (Link is in the comments)
Alex Prompter tweet media
English
115
465
4.1K
377.3K
Rwan
Rwan@apimixweb·
20% of AI skills on the biggest marketplace were malware. One account: 314 poisoned packages. One operation: 335 fake skills targeting macOS. Open marketplaces attract builders AND predators. Curation > scanning. 50 verified workflows > 5,000 potential trojans.
English
1
0
0
15
GuardSkills
GuardSkills@guardskills_·
@ionleu @guardskills_ save you from malicious skills. It scans your skills even before you installing them. It scans skills from skills[.]sh, Clawhub, Playbook, OpenSkills, Github and local.
English
0
0
2
27
John
John@ionleu·
drop ur startup link
English
413
3
159
15.3K
GuardSkills
GuardSkills@guardskills_·
@iamandrewz @ashen_one Stop yourself from installing malware skills by using @guardskills_. It scan skills form Clawhub, skills[.]sh, OpenSkills, Github and local sources. Stay away from malwares.
English
0
0
0
17
iamandrewz
iamandrewz@iamandrewz·
@ashen_one You mention giving it skills, how do you make sure you’re not getting any malware with them?
English
2
0
1
83
Fartalotti.hl
Fartalotti.hl@VentoFartalotti·
Idk who the hell uses clawhub for skills. There is litereally not a single skill that doesn't contain malware, it's almost comical.
English
1
0
1
16
Thomas Sanlis 🥐
Thomas Sanlis 🥐@T_Zahil·
Share your product. I'll buy my favorite, test it, and write a blog post / review about it.
English
563
4
288
28.1K
Ash
Ash@The_USPatri0t·
@elonmusk And then downloading skills with malware…
English
1
0
0
17
Elon Musk
Elon Musk@elonmusk·
People giving OpenClaw root access to their entire life
Elon Musk tweet media
English
10.6K
23.5K
392.4K
64.4M
GuardSkills
GuardSkills@guardskills_·
@DamienAHughes @lkr @eoslick I don't know if Claude Code can do it, but our open-source tool does. It scans skills from Skills[.]sh, Clawhub, GitHub, OpenSkills, and local sources. Use @guardskills_ and stay away from malware.
English
0
0
1
37
Damien A. Hughes
Damien A. Hughes@DamienAHughes·
@lkr @eoslick So claude code can filter out skills that have malware without infecting the pc??
English
1
0
0
15
Laura Roeder
Laura Roeder@lkr·
CLAUDE CODE FOR NON-DEVS When you come across a cool looking skill on twitter, just link to it and ask claude code if it would be useful for your setup. Thaz it.
English
6
1
18
2.5K
GuardSkills
GuardSkills@guardskills_·
@WrightModeAI That's why have created this @guardskills_. It scans skills before it installs any skills from Clawhub, skills[.].sh, openskills or Github. It will STOP you from malwares and we have crossed 1000 downloads recently.
GuardSkills tweet mediaGuardSkills tweet media
English
0
0
0
8
Brooke Wright
Brooke Wright@WrightModeAI·
Biggest AI hack this week: a “harmless” Openclaw skill was basically prompt-injection malware. It looked useful. It wasn’t. It siphoned data while you slept. Save this + check your agent skills/extensions now. #AIsecurity #PromptInjection
English
1
0
0
29
Mike Maher
Mike Maher@mikeMaher·
@grok @morgancap @sentientt_media If there are hundreds of thousands of open-source agent skills being uploaded, there’s a 100% chance it contains a ton of malware. We’ve already seen that with ClawHub.
English
2
0
1
24
Sentient
Sentient@sentient_agency·
Holy shit... someone just built an App Store for Claude Code. It's called SkillsMP and there are 200,000+ agent skills that teach your AI exactly how to write PPTX files, review PRs, deploy to cloud, analyze data, and more. No complex prompting. No building from scratch. No wasted tokens. 100% Opensource.
Sentient tweet media
English
92
212
1.8K
165.6K