Agentlas Security Scan
Agentlas Security Scan is an agent skill (a SKILL.md file) from agentlas-ai/Agentlas-OS. Agents load it when an agent folder must pass the Agentlas Cloud 2-stage security scan (static rules + BYOK LLM judgment) before private… It works with Claude Code, Codex, Cursor, GitHub Copilot and OpenCode and has 1,583 GitHub stars across a repository of 2 listed skills.
github.com/agentlas-ai/Agentlas-OS/skills/agentlas-security-scan (opens in a new tab)
Data as of from the GitHub API; description from the skill's SKILL.md. Report an error
Add this skill
Claude
This repository is a Claude Code plugin marketplace. In Claude Code:
/plugin marketplace add agentlas-ai/Agentlas-OS
/plugin install hephaestus@agentlas-core-engineIn the Claude apps, zip the agentlas-security-scan folder and upload it under Customize > Skills > + > Upload a skill (code execution must be on).
ChatGPT / Codex
Codex reads skills from .agents/skills/ in a repo or ~/.agents/skills/ for every project:
git clone --depth 1 https://github.com/agentlas-ai/Agentlas-OS.git
cp -r Agentlas-OS/skills/agentlas-security-scan .agents/skills/agentlas-security-scan # repo; ~/.agents/skills for all projectsStandalone skills also load in the ChatGPT desktop app.
Cursor
Cursor loads skills from .cursor/skills/ (or ~/.cursor/skills/) and also reads .claude/skills/:
git clone --depth 1 https://github.com/agentlas-ai/Agentlas-OS.git
cp -r Agentlas-OS/skills/agentlas-security-scan .cursor/skills/agentlas-security-scan # project; ~/.cursor/skills for all projectsSource (checked Oct 7, 2026): code.claude.com/docs/en/skills (opens in a new tab), code.claude.com/docs/en/plugin-marketplaces (opens in a new tab), support.claude.com/en/articles/12512180-using-skills-in-claude (opens in a new tab), learn.chatgpt.com/docs/build-skills (opens in a new tab), cursor.com/docs/context/skills (opens in a new tab)
What this skill does
Use when an agent folder must pass the Agentlas Cloud 2-stage security scan (static rules + BYOK LLM judgment) before private sync or public publish, or when asked to run/interpret hephaestus security scan. Plan §6.2: stage 1 is static rule screening, stage 2 is a judgment made by the user's own LLM session (BYOK). The Cloud server never calls an LLM (v1 Non-Goal: no server-side model execution). You — the agent running this skill — are the stage-2 judge.
When it triggers
- Use when an agent folder must pass the Agentlas Cloud 2-stage security scan (static rules + BYOK LLM judgment) before private sync or public publish, or when asked to run/interpret hephaestus security scan.
More skills in agentlas-ai/Agentlas-OS
2 skills are listed from this repository.
Similar skills
More security skills
Entra App Registration
microsoft/azure-skills
Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration.
Active · last commit Oct 23, 2026
OfficialSecurityShellBrooks Audit
hyhmrright/brooks-lint
Architecture audit that maps module dependencies, checks layering integrity, and flags structural decay across a codebase, drawing on twelve classic engineering books.
Active · last commit Oct 24, 2026
SecurityHTMLFootgun Scan
maxrave-dev/kotlin-footguns
Scan a Kotlin or Compose Multiplatform diff for known footgun shapes and open the matching trap to confirm each hit.
Too new to judge · created Aug 20, 2026
SecurityPythonCrabbox Quickstart
openclaw/crabbox
First contact with Crabbox: run your repository's tests inside a disposable Docker or Podman container on your own machine, no account and no cloud spend, then stop the box.
Active · last commit Oct 26, 2026
SecurityGoThinking Red Team
tjboudreaux/cc-thinking-skills
For authorized security review of code, auth, or APIs you control, model the attacker, map the attack surface, and report only findings with a reproducible exploit path and verified mitigation.
Active · last commit Aug 7, 2026
SecurityJavaScriptWebperf
nucliweb/webperf-snippets
Web performance measurement and debugging toolkit.
Active · last commit Oct 26, 2026
SecurityJavaScript
How do I install the Agentlas Security Scan skill?
In Claude Code, run /plugin marketplace add agentlas-ai/Agentlas-OS and then /plugin install hephaestus@agentlas-core-engine. For Codex or Cursor, copy the agentlas-security-scan folder into .agents/skills/ or .cursor/skills/.
Is the Agentlas Security Scan skill free?
Yes. The repository is open source under the Apache-2.0 license.
Is Agentlas Security Scan maintained?
The repository's most recent commit was on Oct 24, 2026. Its latest release is v1.2.69. appsgit only lists skills from repositories with a commit in the last six months.