Footgun Scan
Footgun Scan is an agent skill (a SKILL.md file) from maxrave-dev/kotlin-footguns. Scan a Kotlin or Compose Multiplatform diff for known footgun shapes and open the matching trap to confirm each hit. It works with Claude Code, Codex, Cursor and GitHub Copilot and has 1,004 GitHub stars.
github.com/maxrave-dev/kotlin-footguns/skills/footgun-scan (opens in a new tab)
- Plugin marketplace
- Security
- Actively maintained
Add this skill
Claude
This repository is a Claude Code plugin marketplace. In Claude Code:
/plugin marketplace add maxrave-dev/kotlin-footguns
/plugin install kotlin-footguns@maxraveIn the Claude apps, zip the footgun-scan folder and upload it under Customize > Skills > + > Upload a skill (code execution must be on).
ChatGPT / Codex
Codex reads skills from .agents/skills/ in a repo or ~/.agents/skills/ for every project:
git clone --depth 1 https://github.com/maxrave-dev/kotlin-footguns.git
cp -r kotlin-footguns/skills/footgun-scan .agents/skills/footgun-scan # repo; ~/.agents/skills for all projectsStandalone skills also load in the ChatGPT desktop app.
Cursor
Cursor loads skills from .cursor/skills/ (or ~/.cursor/skills/) and also reads .claude/skills/:
git clone --depth 1 https://github.com/maxrave-dev/kotlin-footguns.git
cp -r kotlin-footguns/skills/footgun-scan .cursor/skills/footgun-scan # project; ~/.cursor/skills for all projectsSource (checked Oct 7, 2026): code.claude.com/docs/en/skills (opens in a new tab), code.claude.com/docs/en/plugin-marketplaces (opens in a new tab), support.claude.com/en/articles/12512180-using-skills-in-claude (opens in a new tab), learn.chatgpt.com/docs/build-skills (opens in a new tab), cursor.com/docs/context/skills (opens in a new tab)
What this skill does
Scan a Kotlin or Compose Multiplatform diff for known footgun shapes and open the matching trap to confirm each hit. Use before committing, when reviewing a Kotlin change, or to audit a codebase. scripts/scan.py matches 32 patterns against the lines a change adds. Each pattern is tied to one trap file in the kotlin-footguns area skills. It finds shapes, not bugs: every hit needs the trap's judgment before it becomes a finding.
When it triggers
- Use before committing, when reviewing a Kotlin change, or to audit a codebase.
Similar skills
More security skills
Wizard
mattpocock/skills
Generate an interactive bash wizard that walks a human through steps only they can perform.
SecurityShellPostgres Patterns
affaan-m/ECC
PostgreSQL database patterns for query optimization, schema design, indexing, and security.
SecurityJavaScriptPonytail Audit
DietrichGebert/ponytail
Whole-repo audit for over-engineering. Like ponytail-review, but scans the entire codebase instead of a diff: a ranked list of what to delete, simplify, or replace with stdlib/native equivalents.
SecurityJavaScriptNext Bundle Optimizer
vercel/next.js
Audit and reduce Next.js browser initial-load work.
OfficialSecurityJavaScriptCloud
browser-use/browser-use
Documentation reference for using Browser Use Cloud — the hosted API and SDK for browser automation.
OfficialSecurityPythonSecurity And Hardening
addyosmani/agent-skills
Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or external integrations, or when checking a…
SecurityJavaScript
What is the Footgun Scan skill?
Footgun Scan is an agent skill (a SKILL.md file) from maxrave-dev/kotlin-footguns. Scan a Kotlin or Compose Multiplatform diff for known footgun shapes and open the matching trap to confirm each hit. It works with Claude Code, Codex, Cursor and GitHub Copilot and has 1,004 GitHub stars. Its SKILL.md lives at github.com/maxrave-dev/kotlin-footguns/skills/footgun-scan.
How do I install the Footgun Scan skill?
In Claude Code, run /plugin marketplace add maxrave-dev/kotlin-footguns and then /plugin install kotlin-footguns@maxrave. For Codex or Cursor, copy the footgun-scan folder into .agents/skills/ or .cursor/skills/.
Is the Footgun Scan skill free?
Yes. The repository is open source under the GPL-3.0 license.
Is Footgun Scan maintained?
The repository's most recent commit was on Sep 25, 2026. appsgit only lists skills from repositories with a commit in the last six months.