🛡️ Secure-Skill Security Check

🔍 What is Secure-Skill?

Secure-Skill is a lightweight static analysis tool designed to assess the security of Python code in GitHub repositories. It helps developers and auditors quickly identify potential risks before using or integrating third-party code.

⚙️ How it Works

1. Clone: Temporarily clones the target repository to a sandboxed environment.
2. Scan: Parses all .py files using regex-based pattern matching.
3. Analyze: Detects dangerous patterns like exec(), unsafe file ops, and network calls.
4. Report: Calculates a safety score and generates a detailed report.

Risk Levels

• CRITICAL -20 points
  Remote Code Execution (RCE) risks like exec, eval, subprocess.
• WARNING -10 points
  Risky operations like file deletion, socket connections, pickle loading.
• INFO -3 points
  Low-risk signals like network imports or standard file reading.

Safety Status

• SAFE (Score ≥ 80)
  No significant issues found.
• SUSPICIOUS (50 ≤ Score < 80)
  Some potential risks detected. Review recommended.
• DANGEROUS (Score < 50)
  High-risk patterns found. Do not run without audit.