Skills

Shadow AI Discovery

verified
Updated May 13, 2026

What this skill does

Scans your GitHub repositories, Slack workspace, and SSO logs to detect unauthorized AI tool usage. Classifies each finding by risk level and data exposure, then generates a prioritized remediation plan with actions ranging from approve-with-controls to block-and-notify. Includes communication templates for affected users.

Example

PROMPT

Approved tools: GitHub Copilot, ChatGPT Enterprise Organization: 300 employees, 60 repositories on GitHub Slack workspace: 45 channels, 120 installed apps Concerns: Developers may be using personal AI accounts with company code

OUTPUT
Shadow AI Discovery Report — February 2026 SUMMARY: Found 7 unapproved AI tools across 4 departments FINDINGS | Tool | Users | Risk | Data Exposure | Action | |-------------------|-------|--------|----------------|--------------| | Claude (personal) | 12 | High | Source code | Replace | | Cursor (free) | 8 | Medium | Internal code | Approve+SSO | | Phind | 5 | Medium | Code snippets | Evaluate | | ChatGPT (free) | 15 | High | Internal docs | Block | | Codeium | 3 | Low | Public code | Approve | | TabNine | 2 | Low | Local only | Approve | | Custom GPT bot | 1 | High | PII in prompts | Block+Review | GitHub scan: Found .cursor/ in 8 repos, .cline/ in 2 repos Slack scan: 3 unauthorized AI bot integrations detected REMEDIATION PLAN - Immediate: Block ChatGPT free, notify 15 users with approved alternatives - This week: Onboard 8 Cursor users to enterprise plan with SSO - This month: Evaluate Phind and Codeium for approved catalog

Required Tools

SlackSlack
GitHubGitHub

Compatible Agents

ClaudeClaude
CursorCursor
WindsurfWindsurf
ChatGPTChatGPT
GitHub CopilotGitHub Copilot
Any MCP-compatible agentAny MCP-compatible agent

Add to your agent

Download Skill

Or install via CLI:

$ npx skills add webrix-ai/agent-skills --skill shadow-ai-discovery

Deploy Org-wide

Provision to teams via RBAC
Identity-aware execution
Signed & verified skills
Full audit trail
Auto-bundled with required MCP servers
Use withwillow

Free for up to 5 users

Your agents are already in the wild.

Give them a Basecamp. Go from AI chaos to AI work, in minutes.

Shadow AI Discovery | Willow Marketplace