theinfosecguy/razin
Static analysis scanner for SKILL.md LLM agent skills with deterministic security findings.
What's novel
Static analysis scanner for SKILL.md LLM agent skills with deterministic security findings.
Code Analysis
5 files read · 2 roundsThis project implements a secure, configurable security policy engine that validates rule overrides against severity constraints and generates deterministic configuration fingerprints for cache invalidation.
Strengths
The code demonstrates excellent separation of concerns with distinct modules for validation, fingerprinting, and effective state resolution. Error handling is robust, specifically validating logical consistency (min <= max) and raising appropriate exceptions. The use of typed dataclasses and sorted keys ensures deterministic behavior essential for caching.
Weaknesses
While the core logic is sound, the project appears to be a configuration layer rather than a full application with complex algorithms. Test coverage seems limited to unit tests for specific functions without integration tests covering the full pipeline.
Score Breakdown
Signal breakdown
Innovation
Craft
Traction
Scope
Evidence
Commits
72
Contributors
1
Files
204
Active weeks
4
Repository
Language
Python
Stars
8
Forks
0
License
MIT