Combo Draft: Security Preflight (agentshield + skillspector)

Scenario

Security check before installing anything: agentshield scans the attack surface of agent config directories like ~/.claude (permissions/credentials/dangerous configs), skillspector scans the target skill/repo content (malicious patterns/insecure configs). Both are read-only scanners (measured zero write surface) and can be prefixed to any combo (001-003 can all run this combo first). Users usually get stuck on "skillspector isn't on PyPI, can't install" and "will the two scanners interfere with each other" — this combo answers that.

Combo members

skillspector: skill/repo content security check (install first)

Download: official GitHub Release wheel (v2.10.0, skillspector-2.10.0-py3-none-any.whl, 476KB); note: NOT on PyPI (404 on both PyPI and the Tsinghua mirror, so pip install skillspector always fails) — distribution channel = GitHub Release wheel, China downloads the wheel via gh-proxy and dependencies via the Tsinghua mirror
Version: [2.10.0, 2.10.0] (manifest locked; Python 3 any-version wheel)
Install:

curl -sL -o skillspector-2.10.0-py3-none-any.whl https://gh-proxy.com/https://github.com/NVIDIA/SkillSpector/releases/download/v2.10.0/skillspector-2.10.0-py3-none-any.whl
pip install -i https://pypi.tuna.tsinghua.edu.cn/simple skillspector-2.10.0-py3-none-any.whl
skillspector --version   # expected output: 2.10.0

note: static scans use --no-llm to skip API keys; LLM semantic analysis (semantic_* analyzers) needs OPENAI_API_KEY or SKILLSPECTOR_PROVIDER (optional).

agentshield: agent config attack-surface audit (install later)

Download: official npm (package ecc-agentshield); China uses the npmmirror registry; GitHub release v1.4.0 has no assets, official distribution via npm
Version: [1.5.0, 1.5.0] (manifest locked; Node >= 18; CLI binary name agentshield, package name ecc-agentshield)
Install:

npm_config_registry=https://registry.npmmirror.com npm install -g ecc-agentshield
agentshield scan   # expected output: AgentShield Security Report

note: install-free direct scan also works: npm_config_registry=https://registry.npmmirror.com npx -y ecc-agentshield scan.

Install order

skillspector first (pip wheel) — the most unusual download source (GitHub Release wheel), install and confirm the network first.
Then agentshield (npm) — the two scanners' cross-ecosystem co-install measured compatible (coexist-skillspector evidence); either order works.

Dependency warnings

Conflicts: agentshield×skillspector compatible (verified 2026-08-28, npm + pip wheel cross-ecosystem co-install dual smoke exit 0, write surfaces don't overlap); possible-compatible with all other entries (inferred, full graph 210 pairs) — both are read-only scanners (measured zero write surface), no shared write/registration/port surfaces.
Versions: skillspector [2.10.0,2.10.0] (Python); agentshield [1.5.0,1.5.0] (Node >= 18).
Environment: skillspector has no background process; agentshield has no background process (watch/runtime continuous-monitoring form not measured, it writes config/resides, its own exclusive write surface); both only read-scan target directories/configs.
China network: skillspector's sticking point is the wheel download (GitHub, the command already carries gh-proxy) and dependencies (Tsinghua mirror); agentshield's is npm (the command already carries npmmirror). The most likely misstep = directly pip install skillspector (always fails, not on PyPI).

Acceptance check (one shot)

Run this block after installing; all green = combo ready; any failure -> back to the matching step in the install walkthrough.

skillspector --version
agentshield --version

预期输出: 2.10.0; agentshield version. Scan usage: skillspector <skills/repo dir> + agentshield scan (prints AgentShield Security Report)

Note: member-level commands measured; point scans at your own skills/repo paths.

Verification evidence

Every combo is measured in an isolated environment (smoke + write-surface check); unmeasured items are honestly marked in the text, and measurement dates are listed in the verification section below.

Verified 2026-08-29 · TTL expires 2027-02-25 (180 days)

Local verification record（2026-08-28）

Evidence path: local repro log 2026-08-28.
Not measured (stated honestly): agentshield watch/runtime continuous-monitoring form (writes config/resides); skillspector LLM semantic analysis (needs API key, optional); compatibility with all entries is the matrix inferred state (possible-compatible).

Combo Draft: Security Preflight (agentshield + skillspector) ✓ Verified