Аудит и карантин локальных AI-скиллов

★ 8.2 · security

dbs-skill-cleaner is a Claude Code skill that scans locally installed skills for hidden advertising, undisclosed commercial intent, task hijacking, suspicious external calls, and unauthorized data access — reporting only by default, without modifying any files. It inspects SKILL.md and executable code files across ~/.claude/skills, ~/.codex/skills, ~/.agents/skills, and ~/.grok/skills, classifying findings into four risk levels: critical, high, needs review, and informational. The underlying skill_cleaner.py script supports scan, quarantine, list-quarantine, and restore commands; custom directories can be added via --root flags. Quarantine moves the real skill directory to ~/.dbs/skill-cleaner/quarantine/<timestamp>/ rather than deleting it, so recovery is always possible — and every isolation step requires explicit user confirmation on a named path before proceeding.