Companion Tools
Host-side security tools that complement Toolhub's in-browser utilities.
Toolhub is fully browser-based — nothing runs server-side, nothing needs install. These external tools are different: they run on your own machine or server. We list them here because they fit Toolhub's privacy-first ethos and address use cases that genuinely require host-side execution.
All are built by JXXR1, the same maintainer as Toolhub. MIT licensed. Self-host them. Audit the source. They're not affiliate links — just companion utilities.
🤖 AI Agents & Harnesses
skill-scanner-v2 v3.5.0 ↗
Security scanner for AI agent skills (OpenClaw / Claude Code / Hermes ecosystems). 38 detection modules covering pattern matching, AST taint tracking, YARA rules, LLM semantic analysis, supply-chain provenance, hash-pinning, and release-signature verification (PGP).
With AI agent harnesses proliferating, the supply chain for downloadable agent "skills" is the next frontier for malware injection. skill-scanner-v2 statically analyses skill packages across 38 detection modules — pattern matching, AST taint tracking, LLM semantic analysis, YARA rules, and typo-squat detection.
Recent supply-chain wave (v3.4 + v3.5) adds: bundled-content provenance for RAG corpora, external-model-download detection (HuggingFace / replicate / etc.), hash-pinning verification against in-flight tampering, and PGP release-signature verification.
🛡️ Security
sentinel-v2 v1.8.0 ↗
Lightweight bash security monitor for Linux servers. Three-layer architecture: file-watch (sub-second), watchdog (every 2 min), full audit + intel (every 6 hours).
Open-port allowlist · sensitive-service exposure detection · root-process audit · world-writable scan · SSH-key delta · failed-login spike detection · cron/systemd delta · security-stack health (ClamAV / CrowdSec / Wazuh / fail2ban) · CVE-feed intel · supply-chain skill-scanner integration · LLM-vendor egress audit · backup integrity verification · Tailscale posture audit.
Why these and not just "a list of cool tools"?
Both are JXXR1's own work. We recommend tools we've built or audited ourselves. Toolhub doesn't publish a "best Linux security tools" listicle — there are plenty of those, and most are SEO farms. This page is a curated handoff for the specific audiences who arrive at Toolhub and need a host-side companion: school IT admins, agent-builders, sysadmins.
If you'd like a tool added: open an issue on the Toolhub repo. We won't accept paid placements.