Config Analyzer

What Config Analyzer is

Config Analyzer is a skill published in the cisco-ai-defense/skill-scanner repository on GitHub, which has about 2.6k stars. The repository describes itself as: “Security Scanner for Agent Skills”

A skill is a folder with a SKILL.md file: frontmatter with a name and a description, followed by instructions Claude follows. Claude loads a skill automatically when a task matches its description, and you can also run it directly with a slash and its name.

Skills work in Claude Code and in Claude Cowork, which makes Config Analyzer a portable way to give Claude the same method everywhere.

How to install Config Analyzer

New to extending Cowork? Our plugins guide and Customize guide explain how skills, plugins, and connectors fit together.

Inside the source file

The repository does not declare an open-source license, so we list only the outline of the file here. Read the full text on GitHub.

• Highlights
• Scope and Limitations
• Current modernization evidence
• Documentation
• Installation
• Quick Start
• Environment Setup (Optional)
• Interactive Wizard
• CLI Usage
• Python SDK
• Security Analyzers
• CLI Options
• Example Output
• GitHub Actions

Open README.md on GitHub

Before you install

• Read the whole file first. Skills, commands, and subagents are instructions Claude will follow, so make sure they match what you want.
• Check which tools, scripts, or MCP servers it uses. Local servers and scripts run with your permissions.
• Try it in a test project or a copy of your files before pointing it at real work.
• Pin the version you tested, and review changes before updating.
• Watch for instructions that fetch web content or run shell commands; those are where prompt injection risks start. See our prompt injection guide.

FAQ