Ast Injection Scanner | Agent Skills Atlas

About this skill

Statically scan agent-generated JavaScript and shell scripts for dangerous patterns using AST analysis (acorn/swc). Detect eval(), process.env access, dynamic require(), childprocess usage, and path traversal before code execution.

Quick start

Copy the install prompt. Use the green button above this README.
Send it to your agent. Paste it into your coding agent’s chat and send.
Review the setup. Your agent checks the skill’s instructions, requirements, and installation scope.

Installation guide →

Review, license & listing details

Review the source before using this skill

This is an imported listing. We haven’t certified its safety, license, or compatibility. Skills may include executable scripts.

Automated security scan: Partial

Only SKILL.md was scanned. Supporting files and scripts were not checked. No safety grade has been assigned.

1 potential finding · Scanned 11/4/2026 · Scanner 0.2.1

high: remote execution — SKILL.md, line 145

Content SHA-256: 05ad12c7a3f51554b3ff9a377a290ecdf3193df98746efa623db2d9b00596156

About scan coverage and limitations

Original listing metadata

Original name

ast-injection-scanner

Original description

Statically scan agent-generated JavaScript and shell scripts for dangerous patterns using AST analysis (acorn/swc). Detect eval(), process.env access, dynamic require(), child_process usage, and path traversal before code execution.

About this listing

Category: Engineering
Reported license: Not specified
Listing language (estimated): English
Review status: Not individually reviewed
Agent compatibility: Atlas installation supports Claude Code, Codex, and Cursor. Skill-specific dependencies and features are checked during setup.