Top AI Repos — open-source AI, indexed and scored
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Semia, security audit for AI agent skills.
| Date | Stars |
|---|---|
| 2026-07-31 | 588 |
| 2026-08-04 | 590 |
| 2026-08-06 | 590 |
Today
— stars today
This week
— stars this week
This month
— stars this month
Momentum
15.0
growth rate 0.00%/day
# Semia > **Security audit for AI agent skills.** Know what a skill *can* do > before you trust it. [](https://github.com/berabuddies/Semia/actions/workflows/ci.yml) [](https://github.com/berabuddies/Semia/actions/workflows/lint.yml) [](https://codecov.io/gh/berabuddies/Semia) [](LICENSE) [](pyproject.toml) Agent skills are markdown files with embedded shell commands, network calls, and tool invocations. They run with **your credentials, on your machine, with your data**. Semia reads a skill as data — never executes it — and produces an evidence-backed report of every capability it may exercise. It is the difference between > *"I trust this skill because the README looks fine."* and > *"I trust this skill because Semia extracted 14 actions, 6 effects, > and 2 secret reads — and every one is grounded in a specific source line."* --- ## Quick example Pick whichever fits how you already work. ### As a CLI ```bash pip install semia-audit semia scan ./some-skill ``` `scan` does prepare → synthesize (via your configured LLM provider) → detect → report in one shot. Output lands under `.semia/runs/<skill-slug>/` by default — pass `--out <path>` to override. You'll need an LLM provider configured first — see [Set up an LLM provider](#set-up-an-llm-provider) below. ### Inside Codex, Claude Code, or OpenClaw Install the plugin once. Each host has its own flow. **Codex** — pick either path: *Shell (scripts and CI):* ```bash codex plugin marketplace add berabuddies/Semia ``` Then enable the plugin by appending to `~/.codex/config.toml`: ```toml [plugins."semia@semia"] enabled = true ``` *Interactive plugin manager inside the Codex CLI:* 1. Launch `codex`. 2. Inside Codex, input `/plugins` (plural — opens the plugin panel). 3. Press **←** (Left) to enter **Add marketplace**. 4. Enter `berabuddies/Semia`. 5. Back in the plugin panel, toggle `semia` on from the newly-added marketplace. **Claude Code** — pick either path: *Shell (one-liner):* ```bash claude plugin marketplace add berabuddies/Semia claude plugin install semia@semia ``` *Interactive plugin manager inside the Claude Code CLI:* 1. Launch `claude`. 2. Inside Claude Code, input `/plugins` (plural — opens the plugin panel). 3. Press **→** (Right) twice and select **Add Marketplace**. 4. Enter `berabuddies/Semia`. Either path registers the marketplace; finish installing `semia` from the panel or with `claude plugin install semia@semia`. **OpenClaw** — one shell command registers the marketplace and installs: ```bash openclaw plugins install clawhub:semia ``` Then in any chat with the host agent just ask: > Run Semia audit on ./some-skill The host agent itself acts as the synthesize step — **no API key needed**. The bundled `semia.pyz` handles prepare / detect / report deterministically. ### Fix what Semia finds ```bash semia repair .semia/runs/some-skill --from-scan ``` `repair` reads the findings and synthesized facts from an existing scan, traces each violation back through the Datalog rules to identify the root cause, then calls an LLM to generate a SKILL.md patch — either fixing the problematic content directly or adding specific security constraints. ```bash # Or scan + repair in one shot: semia repair ./some-skill ``` ### Outputs You get `report.md` — findings ranked by severity, every one tied to a specific source line. Need [SARIF 2.1.0](https://sarifweb.azurewebsites.net/) for GitHub Code Scanning, or structured JSON for downstream tooling? One more command: ```bash semia report .semia/runs/some-skill --format sarif # for GitHub Code Scanning semia report .semia/runs
Excerpt of 8,545 characters
Read on GitHub
50
3
3
3
Would you bet a product on this? Bounded 0–100 and slow moving.
matched fp:8e4b17a49fd97523, desc:ai agent