Version updated for https://github.com/pezhik/skilltotal to version v0.43.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary SkillTotal is an open-source CLI tool that statically analyzes AI-related components to identify supply-chain risks, dangerous capabilities, prompt-injection surfaces, and data-exfiltration paths before they are installed or trusted. It analyzes only the component itself, providing evidence-backed findings without relying on runtime analysis. SkillTotal runs locally without any account or cloud upload, ensuring safe analysis of untrusted components.

Version updated for https://github.com/pezhik/skilltotal to version v0.42.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary SkillTotal is an open-source CLI tool that analyzes AI-related components, including agent skills/plugins, MCP servers, npm packages, Python packages, repositories, and AI-generated projects. It statically scans these components to identify security risks, dangerous capabilities, prompt-injection surfaces, and data-exfiltration paths before installation or trust. SkillTotal avoids running components on the user’s machine and provides deterministic, evidence-anchored reports that are free of false positives.

Version updated for https://github.com/pezhik/skilltotal to version v0.41.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary SkillTotal is an open-source CLI engine that statically analyzes AI-related components, such as agent skills/plugins, MCP servers, and AI-generated projects, to identify potential security risks and dangers. It allows users to scan paths, git URLs, npm/pypi packages, or project archives without leaving their machines and provides detailed evidence-based reports.

Version updated for https://github.com/pezhik/skilltotal to version v0.39.0. This action is used across all versions by ? repositories. Action Type This is a Composite action. Go to the GitHub Marketplace to find the latest changes. Action Summary SkillTotal is a static analysis tool that identifies potential security risks in AI-related components and projects. It scans files locally without running them on the machine, providing evidence-based findings such as file locations and code snippets. SkillTotal is designed to be 100% offline and safe for untrusted components, offering a determinate and standards-aligned approach to detecting supply-chain risks and capabilities before installation or trust.