Merge pull request #8612 from epistemedeus/add-skillguard

🤖🤖🤖 Add SkillGuard (scan skills/MCP servers for malware before install)

README.md

@@ -3755,6 +3755,8 @@ Tools for conducting research, surveys, interviews, and data collection.
 - [dengyier/OpenWorkProof](https://github.com/dengyier/OpenWorkProof) [![dengyier/OpenWorkProof MCP server](https://glama.ai/mcp/servers/dengyier/OpenWorkProof/badges/score.svg)](https://glama.ai/mcp/servers/dengyier/OpenWorkProof) 🐍 🏠 ☁️ - Verifiable execution protocol for AI agent tool calls. Ed25519-signed PolicyDecisions, causal evidence chains (RFC 8785 JCS), and offline verification from SQLite ledger. 2,281 tests, 2 real-world bugs demonstrated end-to-end. `pip install openworkproof`
 - [aurumflux20/seal](https://github.com/aurumflux20/seal) [![aurumflux20/seal MCP server](https://glama.ai/mcp/servers/aurumflux20/seal/badges/score.svg)](https://glama.ai/mcp/servers/aurumflux20/seal) 🐍 🏠 - Exactly-once execution for agents that move money: the same payment can't settle twice across processes or retries. World-confirmation asks the provider ("did this charge actually land?") and returns CONFIRMED_ONE / MULTIPLE / ABSENT / UNKNOWN; out-of-band reconcile catches spend that bypassed the gateway; earned-autonomy licensing (L0–L5) only raises an agent's unattended spend ceiling on proven-clean history. In the official MCP Registry as `io.github.aurumflux20/seal`. `pip install seal-kernel`
 
+- [epistemedeus/skillguard](https://github.com/epistemedeus/skillguard) [![epistemedeus/skillguard MCP server](https://glama.ai/mcp/servers/epistemedeus/skillguard/badges/score.svg)](https://glama.ai/mcp/servers/epistemedeus/skillguard) 📇 🏠 - Static security scanner for Claude Code skills, plugins, and MCP servers — vet a dependency for malware (secret/env exfiltration, install-time hooks, prompt injection, committed binaries) **before** you install it. Static-only: it clones and reads files, never executes the scanned code. `npx -y github:epistemedeus/skillguard mcp`
+
 ### 🌐 <a name="social-media"></a>Social Media
 
 Integration with social media platforms to allow posting, analytics, and interaction management. Enables AI-driven automation for social presence.