Scan Claude Code skills for security vulnerabilities and optionally fix them.
npx skills add https://github.com/sogadaiki/claude-code-skills --skill audit-skill
Please help me install this Agent Skill. Skill: audit-skill Source: https://github.com/sogadaiki/claude-code-skills/tree/main/skills/audit-skill Command: npx skills add https://github.com/sogadaiki/claude-code-skills --skill audit-skill
This Skill automatically audits your Claude Code skills for security vulnerabilities, protecting against prompt injection, data leaks, and privacy breaches before deployment.
SKILL.md, references/, scripts/, etc., for common security flaws./audit-skill your-new-skill --fix to ensure it's safe for public use and automatically resolve common security oversights.Run the audit-skill command on the 'morning' skill directory to check for security risks.
High-intent search queries and answers about installing and using this skill.
To audit Claude Code skills for prompt injection and data leaks, run a security scan over the skill directory. This process identifies sensitive data exposure and personal information leaks, assigning risk severity levels to detected issues.
Before publishing a skill, check for prompt injection, hardcoded paths, API keys, sensitive data exposure, and potential license violations. A security audit categorizes these vulnerabilities by severity to ensure the skill is safe for public use.
You can automatically fix sensitive data exposure and hardcoded paths by running the audit with an optional fix flag. This generates corrected versions of skill files by masking sensitive data and normalizing paths to remediate detected issues.
A security audit categorizes risks in skill scripts and references by assigning severity levels ranging from CRITICAL and HIGH to MEDIUM and LOW. This risk categorization helps prioritize the remediation of common security flaws found during the scan.
The security audit scans core skill files such as SKILL.md, references, and scripts directories. It checks these components for common security flaws, hardcoded API keys, and personal information leaks before deployment.
The best way to ensure skill compliance and prevent privacy breaches before deployment is to run an automated security audit. This scans for vulnerabilities, identifies hardcoded sensitive data, and optionally generates corrected files to remediate issues.
skill-toolsValidate SKILL.md frontmatter and generate diagnostic reports for CI.
Tristan578Audit SpawnForge production environments for deployment and runtime issues.
JylhisDetect Go vulnerabilities using govulncheck, static analysis, and DREAD scoring.
kaustubhhiwareAudit code and cloud configurations for security vulnerabilities.