Skip to content
Skill

deepsafe-scan

by XiaoYiWeio

AI Summary

Full-featured preflight security scanner across 5 dimensions: Works with OpenClaw, Claude Code, Cursor, Codex, and OpenCode. LLM features auto-detect credentials — no manual configuration needed. 1. Present the total score and per-module breakdown to the user

Install

Copy this and paste it into Claude Code, Cursor, or any AI assistant:

I want to install the "deepsafe-scan" skill in my project.

Please run this command in my terminal:
# Install skill into your project
mkdir -p .claude/skills/deepsafe-scan && curl --retry 3 --retry-delay 2 --retry-all-errors -o .claude/skills/deepsafe-scan/SKILL.md "https://raw.githubusercontent.com/XiaoYiWeio/deepsafe-scan/main/SKILL.md"

Then restart Claude Code (or reload the window in Cursor) so the skill is picked up.

Description

Preflight security scanner for AI coding agents — scans deployment config, skills/MCP servers, memory/sessions, and AI agent config files (hooks injection) for secrets, PII, prompt injection, and dangerous patterns. Runs 4 model behavior probes (persuasion, sandbagging, deception, hallucination). Supports LLM-enhanced semantic analysis. Works with OpenClaw, Claude Code, Cursor, Codex, and OpenCode. Use when a user asks for a security audit, health check, or wants to scan their AI agent setup for vulnerabilities.

DeepSafe Scan — Preflight Security Scanner for AI Coding Agents

Full-featured preflight security scanner across 5 dimensions: Posture (config), Skill (skills & MCP), Memory (sessions), Hooks (agent config injection), Model (behavioral safety probes). Works with OpenClaw, Claude Code, Cursor, Codex, and OpenCode. LLM features auto-detect credentials — no manual configuration needed.

When to Use

• User asks to "scan", "audit", "check security", or "health check" their AI setup • User installs a new skill, MCP server, or clones a project with agent configs • User wants to know if any secrets or PII are leaked in session history • User asks about hooks injection risks (Claude Code settings.json, .cursorrules, opencode.json, etc.) • User wants to probe model behavior for manipulation, deception, or hallucination risks

Quick static scan (no API key needed)

`bash python3 {baseDir}/scripts/scan.py --modules posture,skill,memory,hooks --scan-dir . --no-llm --format markdown `

OpenClaw (reads gateway config automatically)

python3 {baseDir}/scripts/scan.py --openclaw-root ~/.openclaw --format html --output /tmp/deepsafe-report.html

Discussion

0/2000
Loading comments...

Health Signals

MaintenanceCommitted 2mo ago
Active
AdoptionUnder 100 stars
75 ★ · Niche
DocsREADME + description
Well-documented

GitHub Signals

Stars75
Forks11
Issues0
Updated2mo ago
View on GitHub
No License

My Fox Den

Community Rating

Sign in to rate this booster

Works With

Claude Code
Cursor