Static Analysis for LLM Agent Skills

Navigation

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for theinfosecguy from gravatar.com theinfosecguy

Unverified details

These details have not been verified by PyPI
Meta
  • Requires: Python >=3.12
Report project as malware

Project description

Razin - Static analysis for LLM agent skills

razin

Razin is a local scanner for SKILL.md-defined agent skills. It performs static analysis only (no execution) and writes deterministic findings.

Table of contents

Documentation

Full documentation lives at:

Canonical docs source in this repository:

  • docs/

Use this README for quick start only.

Requirements

  • Python 3.12+

Install

With Homebrew (current, via tap):

brew tap theinfosecguy/homebrew-tap
brew install razin
razin --help

With PyPI:

pip install razin
razin --help

Quick start

Run a scan:

razin scan -r . -o output/

Validate config:

razin validate-config -r .

Common CI gates

# Fail if any high-severity finding exists
razin scan -r . --fail-on high --no-stdout

# Fail if aggregate score is 70 or above
razin scan -r . --fail-on-score 70 --no-stdout

Output formats

# Default per-skill JSON reports
razin scan -r . -o output/ --output-format json

# Add CSV + SARIF exports
razin scan -r . -o output/ --output-format json,csv,sarif

Local development

uv sync --dev
uv run pytest -q
uv run ruff check src tests
uv run mypy src tests

Docs preview and checks:

uv sync --group docs
uv run mkdocs serve
uv run mkdocs build --strict
uv run mdformat --check README.md docs

Where to read more

Contributing

See CONTRIBUTING.md.

Security

See SECURITY.md.

License

MIT

Project details

Verified details

These details have been verified by PyPI
Project links
GitHub Statistics
Maintainers
Avatar for theinfosecguy from gravatar.com theinfosecguy

Unverified details

These details have not been verified by PyPI
Meta
  • Requires: Python >=3.12

Release history Release notifications | RSS feed

This version

1.5.0

1.4.0

1.3.2

1.3.1

1.3.0

1.2.0

1.1.1

1.1.0

1.0.2

1.0.1

1.0.0

0.2.0

0.1.0

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

razin-1.5.0.tar.gz (237.8 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

razin-1.5.0-py3-none-any.whl (148.1 kB view details)

Uploaded Python 3

File details

Details for the file razin-1.5.0.tar.gz.

File metadata

  • Download URL: razin-1.5.0.tar.gz
  • Upload date:
  • Size: 237.8 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for razin-1.5.0.tar.gz
Algorithm Hash digest
SHA256 96966ac5188e523c5bdf9572e33fa24dee58015eac2f2dde97adbba1ba2d4765
MD5 d1e292213d86cb5a503817258d567178
BLAKE2b-256 379651fec086668436be9396c404c9cbb967d1bb3014a15177c4de81cd032ac7

See more details on using hashes here.

Provenance

The following attestation bundles were made for razin-1.5.0.tar.gz:

Publisher: release-pypi.yml on theinfosecguy/razin

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file razin-1.5.0-py3-none-any.whl.

File metadata

  • Download URL: razin-1.5.0-py3-none-any.whl
  • Upload date:
  • Size: 148.1 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for razin-1.5.0-py3-none-any.whl
Algorithm Hash digest
SHA256 ac7ede8d0ba4ebb35bb97849a2c83e4d03d094a05d0cdd25c245d3ec6e37034d
MD5 658b6fb919ccd343f3ebedeaac08b4dc
BLAKE2b-256 2a09125f1b171b2bbc57dac61e450de615178041015da3bad08deafa5c156264

See more details on using hashes here.

Provenance

The following attestation bundles were made for razin-1.5.0-py3-none-any.whl:

Publisher: release-pypi.yml on theinfosecguy/razin

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page