skills-firewall

# Skills Firewall

A security firewall that automatically blocks and filters malicious or potentially harmful skills by analyzing code patterns, detecting security threats, and enforcing security policies.

## Quick Start

### Scan a Single Skill

```bash
python scripts/scan_skill.py /path/to/skill
```

### Check Firewall Decision

```bash
python scripts/firewall_check.py /path/to/skill
```

### Generate Security Report

```bash
python scripts/generate_report.py /path/to/skills --format text
```

## Core Workflows

### 1. Security Scanning

Scan skills for potential security threats:

```bash
# Scan single skill
python scripts/scan_skill.py ./my-skill

# Scan all skills in directory
python scripts/scan_skill.py ./skills

# JSON output for automation
python scripts/scan_skill.py ./my-skill --json
```

**Threat Levels:**
- `SAFE` - No security concerns
- `LOW` - Minor concerns, generally safe
- `MEDIUM` - Moderate concerns, review recommended
- `HIGH` - Significant risks, blocking recommended
- `CRITICAL` - Severe threats, must block

### 2. Firewall Filtering

Check and filter skills based on security rules:

```bash
# Check single skill
python scripts/firewall_check.py ./my-skill

# Filter all skills
python scripts/firewall_check.py ./skills

# Add to allowed list
python scripts/firewall_check.py ./my-skill --allow

# Add to blocked list
python scripts/firewall_check.py ./my-skill --block
```

**Actions:**
- `allow` - Skill passes firewall
- `warn` - Skill has warnings but allowed
- `block` - Skill is blocked
- `quarantine` - Skill isolated for review

### 3. Security Reports

Generate comprehensive security reports:

```bash
# Text report
python scripts/generate_report.py ./skills

# JSON report
python scripts/generate_report.py ./skills --format json

# HTML report
python scripts/generate_report.py ./skills --format html --output report.html
```

## Detection Categories

The firewall detects threats in these categories:

| Category | Examples | Severity |
|-------...