Check what is already installed

A small script hashes each skill on your machine and looks that exact version up in Akula. Only the hash leaves your machine, never your files.

Run it once

Needs Node 18 or newer. By default it checks ~/.claude/skills and .claude/skills. Pass a folder to check another location.

curl -fsSLO https://akula-production.up.railway.app/akula.mjs
node akula.mjs verify

Read the script before you run it. It has no dependencies. Its sha256 is d27e0dc63a218c87f66611853aaf787143790991e91216ea2feb6eb290bea082.

Check on every session

Save the script as ~/.claude/akula.mjs and add this to ~/.claude/settings.json. Claude Code then starts each session with a list of skills to avoid or that have changed since they were checked.

{
  "hooks": {
    "SessionStart": [{
      "hooks": [{ "type": "command", "command": "node ~/.claude/akula.mjs verify --quiet" }]
    }]
  }
}

Reading the result

Do not useCritical findings on this exact version. The command exits with code 1, so it can stop a script.
Use with cautionFindings to review, or a benefit that is not proven.
Not checkedAkula has never seen this exact version. If a skill was checked before, it has changed since. Check it now.

A clean result does not mean a skill is safe. See how often the scanner misses.