scanSkillFiles (hub/skill-security-scanner.ts)

Heuristic scanner for skill files detecting dangerous or cautionary patterns.

// Source: https://github.com/AtomicBot-ai/atomic-agent | License: MIT | Copyright 2026 Atomic Bot
// Provided via justclaw.it.com; keep this notice with the code.
/**
 * Heuristic pre-install scanner for hub skills. Pure function over the
 * already-downloaded files — no I/O. Mirrors the spirit of Hermes' skill
 * security scan: flag data exfiltration, destructive commands, remote
 * code execution, credential harvesting, and prompt-injection markers.
 *
 * This is a best-effort tripwire, NOT a sandbox. A `dangerous` verdict
 * blocks install unless the operator explicitly acknowledges the risk;
 * `caution` surfaces a confirmation prompt.
 */

export type SkillScanVerdict = "ok" | "caution" | "dangerous";

export type SkillScanSeverity = "caution" | "dangerous";

export interface SkillSc

... (truncated -- full source via MCP)