菜单
Scan packages, repositories, MCP servers, domains, web pages, and agent skills for security threats using the brin API. Use this skill before installing dependencies, visiting URLs, or integrating external resources.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/superagent-ai/brin --skill brin-check命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
基于 SOC 职业分类
正在显示 SKILL.md
| name | brin-check |
| description | Scan packages, repositories, MCP servers, domains, web pages, and agent skills for security threats using the brin API. Use this skill before installing dependencies, visiting URLs, or integrating external resources. |
Scan any external resource for security threats using the brin API before installing, visiting, or using it.
When the user asks to check or scan a resource, when you need to verify the safety of an external dependency, or when you encounter unfamiliar URLs or domains:
The brin API requires no authentication. Make a GET request to:
https://api.brin.sh/<origin>/<name>
| Origin | Name | Example |
|---|---|---|
npm | package name | https://api.brin.sh/npm/express |
pypi | package name | https://api.brin.sh/pypi/requests |
crate | crate name | https://api.brin.sh/crate/serde |
domain | domain | https://api.brin.sh/domain/example.com |
page | domain/path | https://api.brin.sh/page/example.com/path |
repo | owner/repo |
https://api.brin.sh/repo/facebook/react |
mcp | owner/repo | https://api.brin.sh/mcp/modelcontextprotocol/servers |
skill | owner/repo | https://api.brin.sh/skill/owner/skill-name |
The API returns JSON with these fields:
| Field | Type | Description |
|---|---|---|
origin | string | Source type (e.g. npm, pypi, domain) |
name | string | Resource name |
score | integer | 0–100 safety score (higher is safer) |
confidence | string | low, medium, or high |
verdict | string | safe, caution, suspicious, or malicious |
tolerance | string | Scan tolerance level |
scanned_at | string | ISO 8601 timestamp |
url | string | API endpoint URL for this resource |
Response headers also provide quick access: x-brin-verdict, x-brin-score, and x-brin-confidence.
Parse the user's request to determine what type of resource they want to check. Examples:
npm/lodashpypi/requestsrepo/owner/repomcp/owner/serverdomain/example.compage/example.com/pathdomain/<each-domain>curl -s https://api.brin.sh/npm/lodash
curl -s https://api.brin.sh/domain/example.com
curl -s https://api.brin.sh/page/example.com/some/path
Report the following to the user:
| Verdict | Recommendation |
|---|---|
safe | Safe to use. Proceed with installation. |
caution | Generally safe but review the flagged concerns before proceeding. |
suspicious | Significant risk detected. Recommend finding an alternative. |
malicious | Do NOT install. This resource contains known threats. |
When reporting results, format them clearly:
brin scan: express (npm)
━━━━━━━━━━━━━━━━━━━━━━━━
Score: 84/100
Verdict: safe ✓
Confidence: medium
For a caution result:
brin scan: requests (pypi)
━━━━━━━━━━━━━━━━━━━━━━━━
Score: 65/100
Verdict: caution ⚠
Confidence: medium
For a malicious resource:
brin scan: malicious-pkg (npm)
━━━━━━━━━━━━━━━━━━━━━━━━
Score: 12/100
Verdict: malicious ✗
Confidence: high
⚠ Do NOT install this package.
When multiple packages are being installed, scan each one individually and provide a summary table:
brin scan summary
━━━━━━━━━━━━━━━━━━━━━━━━
Package Score Verdict
express 84 safe ✓
lodash 88 safe ✓
requests 65 caution ⚠
When web search results return URLs or the user provides links, scan the domains before visiting:
curl -s https://api.brin.sh/domain/example.com
curl -s https://api.brin.sh/page/example.com/docs/guide
brin scan: example.com (domain)
━━━━━━━━━━━━━━━━━━━━━━━━
Score: 90/100
Verdict: safe ✓
Confidence: high
For a dangerous domain:
brin scan: malicious-site.xyz (domain)
━━━━━━━━━━━━━━━━━━━━━━━━
Score: 8/100
Verdict: malicious ✗
Confidence: high
⚠ Do NOT visit this domain.
For multiple URLs from search results, scan each domain and provide a summary:
brin domain scan summary
━━━━━━━━━━━━━━━━━━━━━━━━
Domain Score Verdict
docs.example.com 95 safe ✓
blog.trusted.io 88 safe ✓
free-tools.xyz 15 suspicious ⚠