SkillGuard is a local-first security scanner for coding-agent skills and MCP servers. It detects prompt injection, credential theft, data exfiltration and unsafe downloads, then blocks unscanned or risky tools via Claude Code and Codex hooks.
Developer toolsAI & MLTesting & debugging
A small repository that tracks pinned GitHub Actions metadata so workflows can reference immutable commit SHAs. It maintains a CSV source list plus a published pins.json, with an issue-and-label workflow that validates requests and auto-merges updates.
Developer toolsAutomationBuild & DevOps