Skill Inspector
NVIDIA/SkillSpector
Decides whether an agent skill is safe to install by combining a SkillSpector static scan with the agent's own source review, ending in APPROVE, CAUTION or REJECT.
Run a security vulnerability assessment based on KISA guidelines.
$ npx skills add cdppcorp/KESE-KIT --skill kesekit-start -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install cdppcorp/KESE-KIT kesekit-start --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/kesekit-start .claude/skills/kesekit-start && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "kesekit-start" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-start into .claude/skills/kesekit-start/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-start", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-startType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add cdppcorp/KESE-KIT --skill kesekit-start -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install cdppcorp/KESE-KIT kesekit-start --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/kesekit-start .agents/skills/kesekit-start && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "kesekit-start" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-start into .agents/skills/kesekit-start/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-start", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add cdppcorp/KESE-KIT --skill kesekit-start -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install cdppcorp/KESE-KIT kesekit-start --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/kesekit-start .cursor/skills/kesekit-start && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "kesekit-start" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-start into .cursor/skills/kesekit-start/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-start", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/cdppcorp/KESE-KIT.git --path skills/kesekit-start--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add cdppcorp/KESE-KIT --skill kesekit-start -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install cdppcorp/KESE-KIT kesekit-start --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/kesekit-start .gemini/skills/kesekit-start && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "kesekit-start" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-start into .gemini/skills/kesekit-start/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-start", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install cdppcorp/KESE-KIT kesekit-startInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add cdppcorp/KESE-KIT --skill kesekit-start -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/kesekit-start .github/skills/kesekit-start && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "kesekit-start" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-start into .github/skills/kesekit-start/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-start", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add cdppcorp/KESE-KIT --skill kesekit-start -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install cdppcorp/KESE-KIT kesekit-start --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/kesekit-start .opencode/skills/kesekit-start && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "kesekit-start" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-start into .opencode/skills/kesekit-start/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-start", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
kesekit-startRun a security vulnerability assessment based on KISA guidelines.
Kesekit Start is an agent skill from cdppcorp/KESE-KIT. Run a security vulnerability assessment based on KISA guidelines. Supports CII (560+ items), AI Security Guide, Robot Security (103 items), Space Security (satellite/GSaaS/supply chain, 12 domains, 53 items), Secure Coding (46 CWE), Zero Trust (~396 items), and SW Supply Chain Security (SBOM, 29 items). Use when "security assessment", "vulnerability scan", "CII audit", "KISA assessment", "AI security", "robot security", "space security", "satellite security", "GSaaS security", "zero trust", "ZTA", "ZTNA", "supply…
Its SKILL.md is about 2.3k tokens, which your agent loads only when the skill is triggered. The skill folder holds 89 other files, including scripts and reference files (for example `references/ai-security/overview.md`, `references/ai-security/service-provider.md` and `references/ai-security/user-guide.md`).
It sits in Security, covering Supply chain security, Prompt injection and agent security and Secure coding. The repository describes itself as: KISA 주요정보통신기반시설 기술적 취약점 분석 평가방법 상세가이드 기반 Skills. The licence is MIT.
5 steps, taken from the first numbered list in SKILL.md.
Read from SKILL.md and the folder at commit cd118f9. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Ships 1 file in scripts/, which the agent can run.
From the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Kesekit Start loads about 2.3k tokens when it runs, and up to ~19k if it reads all its reference files. Until then it costs about 141 tokens; SKILL.md has 775 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.
The full file from cdppcorp/KESE-KIT at commit cd118f9, republished under its MIT licence (© cdppcorp). 775 words, ~2,270 tokens.
.claude/skills/kesekit-start/SKILL.md (or your agent's skills folder). This skill also uses 81 other files; get the full folder from GitHub.Perform comprehensive security vulnerability assessment based on KISA guidelines. Automatically selects the appropriate guideline based on user context.
| # | Guideline | Description | Items |
|---|---|---|---|
| 1 | CII (Critical Information Infrastructure) | Technical(424)+Administrative(127)+Physical(18) | ~560 |
| 2 | AI Security | AI Developer/Service Provider/User requirements | ~54 |
| 3 | Robot Security | Industrial/Service/Medical robot checklist (11 categories) | ~103 |
| 4 | Space Security | Satellite/GSaaS/Supply chain checklist (12 domains) | 53 |
| 5 | Secure Coding | JavaScript/Python secure coding (7 categories, 46 CWE) | 46 |
| 6 | Zero Trust | Zero Trust maturity assessment (8 elements, 4 maturity levels) | ~396 |
| 7 | SW Supply Chain | SBOM-based supply chain security (5 phases, 29 items) | 29 |
Read the appropriate reference file from templates/cii/ based on the target system.
| System | Reference File | Items |
|---|---|---|
| Unix/Linux | templates/cii/unix.md | 67 |
| Windows Server | templates/cii/windows.md | 64 |
| Web Service | templates/cii/web-service.md | 26 |
| Security Equipment | templates/cii/security-equip.md | 23 |
| Network Equipment | templates/cii/network.md | 38 |
| Control System | templates/cii/control-system.md | 46 |
| PC | templates/cii/pc.md | 18 |
| DBMS | templates/cii/database.md | 26 |
| Mobile | templates/cii/mobile.md | 4 |
| Web Application | templates/cii/webapp.md | 21 |
| Virtualization | templates/cii/virtualization.md | 25 |
| Cloud | templates/cii/cloud.md | 19 |
| Administrative | templates/cii/admin.md | 127 |
| Physical | templates/cii/physical.md | 18 |
Check commands available in scripts/cii/ directory.
Read from references/ai-security/ for overview and guidance, and templates/ai-security/ for assessment checklists.
| Target | Reference File |
|---|---|
| Overview | references/ai-security/overview.md |
| AI Developer | templates/ai-security/developer.md |
| Service Provider | references/ai-security/service-provider.md |
| User | references/ai-security/user-guide.md |
6-stage lifecycle: Planning → Data → Model Dev → Deploy → Monitoring → Decommission
Read from templates/robot-security/ based on the target robot system or concern.
| Topic | Reference File |
|---|---|
| Overview | templates/robot-security/overview.md |
| SSDF / secure software development | templates/robot-security/ssdf.md |
| Supply chain security | templates/robot-security/supply-chain.md |
| IEC 62443 controls (IA, UC, SI, DP, DFR, ER, RA) | templates/robot-security/iec62443.md |
| Cyber resilience | templates/robot-security/cyber-resilience.md |
| Wireless security | templates/robot-security/wireless.md |
Assess the relevant categories for industrial, service, or medical robots and generate a dedicated reports/robot-security/ summary when robot security is selected.
Read from references/space-security/ for overview and supply chain guidance, and templates/space-security/ for assessment checklists.
| Topic | Reference File |
|---|---|
| Overview | references/space-security/overview.md |
| Access Control & Authentication (AC, IA) | templates/space-security/access-control.md |
| System & Communication Security (SC, SI) | templates/space-security/system-security.md |
| Operations & Incident Response (SO, IR) | templates/space-security/operations.md |
| Governance, Personnel, Physical, Risk, Contingency (PS, PE, RA, SG, CP) | templates/space-security/governance.md |
| Supply Chain Management (SM) + Threat Scenarios | references/space-security/supply-chain.md |
12 domains, 53 items. Standards: CMMC, K-RMF, NIS2, ISMS-P. Generate reports in reports/space-security/.
Read from references/secure-coding/ for overview and pseudo code patterns, and templates/secure-coding/ for language-specific assessment.
| Topic | Reference File |
|---|---|
| Overview (7 categories, 49 CWE) | references/secure-coding/overview.md |
| Pseudo Code (46 items, language-agnostic) | references/secure-coding/pseudocode.md |
| JavaScript (Express.js, Node.js, Sequelize) | templates/secure-coding/javascript.md |
| Python (Django, Flask, SQLAlchemy) | templates/secure-coding/python.md |
Read from references/zero-trust/ for overview and maturity model, and templates/zero-trust/ for assessment checklists.
| Topic | Reference File |
|---|---|
| Overview | templates/zero-trust/overview.md |
| Identity & Device | templates/zero-trust/identity-device.md |
| Network & System | templates/zero-trust/network-system.md |
| Application & Data | templates/zero-trust/app-data.md |
| Visibility & Automation | templates/zero-trust/visibility-automation.md |
| OT/ICS Environment | templates/zero-trust/ot-environment.md |
| ZT Architecture Reference | references/zero-trust/overview.md |
| Maturity Model Details | references/zero-trust/maturity-model.md |
| OT Deployment Guide | references/zero-trust/ot-guide.md |
8 core elements, ~396 items across 4 maturity levels. Standards: KISA ZT Guideline 2.0, NIST SP 800-207, CISA ZT Maturity Model.
ot-environment.mdRead from references/supply-chain/ for overview and threat scenarios, and templates/supply-chain/ for assessment checklists. Use scripts/supply-chain/ for SBOM generation and vulnerability scanning commands.
| Topic | Reference File |
|---|---|
| Overview (C-SCRM, SBOM, Regulations) | references/supply-chain/overview.md |
| Assessment Overview (6 categories) | templates/supply-chain/overview.md |
| Self-Assessment Checklist (29 items) | templates/supply-chain/sbom-checklist.md |
| SBOM Generation Scripts | scripts/supply-chain/sbom-generate.md |
| Vulnerability Scanning Scripts | scripts/supply-chain/sbom-vuln-scan.md |
5 phases: Design (5) → Development (11) → Supply (3) → Operations (7) → Maintenance (3). Standards: NIST SP 800-161r1 (C-SCRM), NIST SP 800-218 (SSDF), NTIA SBOM, NIS-SBOM.
references/supply-chain/overview.md for contexttemplates/supply-chain/sbom-checklist.md for the 29-item checklistscripts/supply-chain/sbom-generate.md for SBOM creation commandsscripts/supply-chain/sbom-vuln-scan.md for vulnerability scanning© cdppcorp, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
SKILL.md and 81 other files (scripts, references) in skills/kesekit-start of cdppcorp/KESE-KIT.
Open the folder on GitHubat commit cd118f9
Kesekit Start next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Kesekit Start this skillcdppcorp/KESE-KIT | 361 | — | ~2.3k | Automated safety check: Pass | MIT | |
| Skill InspectorNVIDIA/SkillSpector | 20k | 1 repos | ~1.8k | Automated safety check: Pass | Apache-2.0 | |
| Skill Scannergetsentry/skills | 1k | 4 repos | ~2.5k | Automated safety check: Warn | Apache-2.0 | |
| Forensifyalexgreensh/repo-forensics | 188 | — | ~2.5k | Automated safety check: Notes | Custom licence | |
| Security AuditTheDecipherist/claude-code-mastery | 550 | — | ~1.3k | Automated safety check: Notes | MIT | |
| Pre-Commit Security Scanzereight/gitlab-mcp | 2k | 1 repos | ~859 | Automated safety check: Notes | MIT |
NVIDIA/SkillSpector
Decides whether an agent skill is safe to install by combining a SkillSpector static scan with the agent's own source review, ending in APPROVE, CAUTION or REJECT.
getsentry/skills
Scan agent skills for security issues. An agent skill from getsentry/skills.
alexgreensh/repo-forensics
Cross-agent self-inspection of your AI-agent stack. An agent skill from alexgreensh/repo-forensics.
TheDecipherist/claude-code-mastery
Checks a codebase for hardcoded secrets, vulnerable dependencies, weak input handling, weak authentication and unsafe transport settings before deployment or merge.
zereight/gitlab-mcp
Runs a fast security sweep of recent code changes before a commit or PR, checking for leaked secrets, vulnerable dependencies, unsafe input handling and auth gaps.
warpdotdev/warp
Gathers security findings from Dependabot, GCP container scanning, Docker Scout and Linear security issues, then triages and remediates them across Warp's repos and images.
cdppcorp/KESE-KIT
Run a pre-deployment security compliance checklist based on KISA guidelines.
cdppcorp/KESE-KIT
KISA 가이드라인 기반 배포 전 보안 컴플라이언스 체크리스트를 실행합니다. An agent skill from cdppcorp/KESE-KIT.
cdppcorp/KESE-KIT
Auto-fix security vulnerabilities found in CII, AI, robot, space, and supply chain systems.
cdppcorp/KESE-KIT
보안 취약점 자동 수정 및 하드닝 스크립트를 생성합니다. An agent skill from cdppcorp/KESE-KIT.
cdppcorp/KESE-KIT
Generate secure coding prompts and guides for AI tools (Claude, ChatGPT, Cursor, Copilot).
cdppcorp/KESE-KIT
AI 도구(Claude, ChatGPT, Cursor, Copilot)용 시큐어 코딩 프롬프트와 가이드를 생성합니다.
Categories
Run a security vulnerability assessment based on KISA guidelines. Kesekit Start is an agent skill from cdppcorp/KESE-KIT. Run a security vulnerability assessment based on KISA guidelines.
Kesekit Start fits situations like: security assessment; vulnerability scan; KISA assessment; satellite security.
Run `npx skills add cdppcorp/KESE-KIT --skill kesekit-start -a claude-code`. Or copy the skill folder (skills/kesekit-start in cdppcorp/KESE-KIT) into .claude/skills/kesekit-start in your project. Claude Code loads it when a task matches its description.
Run `npx skills add cdppcorp/KESE-KIT --skill kesekit-start -a codex`. Or copy the skill folder (skills/kesekit-start in cdppcorp/KESE-KIT) into .agents/skills/kesekit-start in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add cdppcorp/KESE-KIT --skill kesekit-start -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/kesekit-start, .gemini/skills/kesekit-start, .github/skills/kesekit-start and .opencode/skills/kesekit-start in your project.
SKILL.md names no scripts, command-line tools or credentials: Kesekit Start is instructions for the agent only. Our summary lists: Python 3; Node.js.
SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.
Kesekit Start is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 2.3k tokens (SKILL.md is roughly 9.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 16k tokens, read only when the agent opens those files.
Skills that share tags, products or a category with Kesekit Start: Skill Inspector (NVIDIA/SkillSpector, 20k stars), Skill Scanner (getsentry/skills, 1k stars), Forensify (alexgreensh/repo-forensics, 188 stars) and Security Audit (TheDecipherist/claude-code-mastery, 550 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
cdppcorp (a GitHub organization) maintains it in cdppcorp/KESE-KIT, which has 361 GitHub stars. The repository holds 8 skills in this directory. The repository was last updated on April 9, 2026.
Source: cdppcorp/KESE-KIT on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.