Scan an agent skill for risky instructions before you install it
UNPWNED's free Skill Scanner flags risky instructions in Claude Code or Cursor skills without running them, since GitHub stars are not a safety check. No signup.
Source
@azulay_raz on X · 2026-10-18
Written in our own words. Credit to the original author. Link checked 2026-10-18.
What they did
UNPWNED's free Skill Scanner flags risky instructions in Claude Code or Cursor skills without running them, since GitHub stars are not a safety check. No signup.
Result (as claimed)
Free web tool; the builder notes a clean scan is not a guarantee.
Tools they used
Cost: Claude Code: from $17/mo; Cursor: free plan, paid from $8/mo.
Set it up
Pick a contained repo or task
Start on a branch or side project where mistakes are cheap.
Install and configure
Set up Claude Code, Cursor. Read what it can run on your machine and limit permissions where possible.
Run it on a real task
Give it a well-scoped issue and let it work. Review the diff like any pull request.
Add guardrails
Keep tests and CI in the loop, and never let an agent push to main or touch production secrets unattended.
Copy the full setup prompt
Paste into your agent and it will walk you through the setup, asking before anything that sends, posts or spends.
You are helping me set up this AI use case end to end in Claude Code. Goal: Scan an agent skill for risky instructions before you install it What the original author did: UNPWNED's free Skill Scanner flags risky instructions in Claude Code or Cursor skills without running them, since GitHub stars are not a safety check. No signup. Reported result (as claimed by the author): Free web tool; the builder notes a clean scan is not a guarantee. Source: https://x.com/azulay_raz/status/2111721456874787150 Tools they used: Claude Code, Cursor Category: Dev & ops Please: 1. Ask me 3 short questions about my situation (accounts I have, budget, what I want the output to look like). 2. Propose a step-by-step plan using these tools or cheaper alternatives, with the time and cost of each step. Use official pricing pages; say "check pricing" if unsure. 3. Then do the setup with me one step at a time, waiting for my OK before anything that sends messages, posts publicly, spends money or deletes data. 4. Finish with a checklist to run it again next time.
You are helping me set up this AI use case end to end in Codex. Goal: Scan an agent skill for risky instructions before you install it What the original author did: UNPWNED's free Skill Scanner flags risky instructions in Claude Code or Cursor skills without running them, since GitHub stars are not a safety check. No signup. Reported result (as claimed by the author): Free web tool; the builder notes a clean scan is not a guarantee. Source: https://x.com/azulay_raz/status/2111721456874787150 Tools they used: Claude Code, Cursor Category: Dev & ops Please: 1. Ask me 3 short questions about my situation (accounts I have, budget, what I want the output to look like). 2. Propose a step-by-step plan using these tools or cheaper alternatives, with the time and cost of each step. Use official pricing pages; say "check pricing" if unsure. 3. Then do the setup with me one step at a time, waiting for my OK before anything that sends messages, posts publicly, spends money or deletes data. 4. Finish with a checklist to run it again next time.
You are helping me set up this AI use case end to end in Grok Bot. Goal: Scan an agent skill for risky instructions before you install it What the original author did: UNPWNED's free Skill Scanner flags risky instructions in Claude Code or Cursor skills without running them, since GitHub stars are not a safety check. No signup. Reported result (as claimed by the author): Free web tool; the builder notes a clean scan is not a guarantee. Source: https://x.com/azulay_raz/status/2111721456874787150 Tools they used: Claude Code, Cursor Category: Dev & ops Please: 1. Ask me 3 short questions about my situation (accounts I have, budget, what I want the output to look like). 2. Propose a step-by-step plan using these tools or cheaper alternatives, with the time and cost of each step. Use official pricing pages; say "check pricing" if unsure. 3. Then do the setup with me one step at a time, waiting for my OK before anything that sends messages, posts publicly, spends money or deletes data. 4. Finish with a checklist to run it again next time.
The Daily 5
Get five new use cases tomorrow morning
Free. Real sources. Unsubscribe any time.
Guides for this use case
How to vibe code an app with Claude Code · How to use Cursor agents and automations · How to use Claude Code skills and plugins
Related use cases
Get notified when your coding agent finishes or needs approval
Midway is a Rust CLI that pings you when long commands finish and when Claude Code, Codex, Gemini CLI, Cursor and other agents are done or waiting for approval. Install with cargo install midway-cli.
Put one coding agent in charge of the others
Running Claude Code, Codex, Grok and Cursor in four terminals meant copying work between them by hand, so a former café owner and trader built Hivelane: one agent leads and the rest are on call.
See which coding agent chat is waiting on you from one local board
DHI Orbit is one local board for Claude Code, Codex, Cursor, Gemini CLI and Antigravity that shows what needs you, what is working, your usage limits and a reply box.
Give every coding agent the same structured delivery workflow
AI-DLC from AWS Labs turns AI coding assistants into a structured, verifiable software delivery workflow. One harness-neutral core runs in Claude Code, Kiro, Codex CLI, Cursor, opencode and GitHub Copilot, installed with one command.