Skill Scanner ships as a CLI tool, a Python library, and a REST API. This section covers day-to-day usage for all three interfaces, plus scan-policy tuning and configuration.
- Scan a skill locally -- Run the CLI against a skill directory on your machine or in a CI pipeline.
- Embed scanning in Python -- Import the SDK to scan skills programmatically inside your own applications.
- Integrate via REST API -- Upload skill ZIPs over HTTP for CI/CD, web portals, or service-to-service workflows.
- Tune detection sensitivity -- Choose a preset policy or write custom YAML to control which rules fire and at what severity.
- Scan Policies Overview
- Custom Policy Configuration
- API Server
- API Rationale — when to use the API vs CLI/SDK
- Python SDK