check-malicious-code

Name: check-malicious-code
Availability: InStock
Author: pachoroa

Audit installed skills for malicious code and security vulnerabilities.

Updated Feb 10, 2026

Search Tags:#security #audit #skills #regex #whitelist #malicious-code

Ready to run

npx skills add https://github.com/pachoroa/mis_skills --skill check-malicious-code

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: check-malicious-code
Source: https://github.com/pachoroa/mis_skills/tree/main/.github/skills/check-malicious-code
Command: npx skills add https://github.com/pachoroa/mis_skills --skill check-malicious-code

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Audit installed skills to detect malicious code, hidden instructions, and security vulnerabilities before enabling them in your workflow.

Core Features & Use Cases

Pattern-based detection using regex across skill files (SKILL.md, scripts, and documentation)
Context-aware analysis with line-level context and whitelist support
Comprehensive reports in Markdown and JSON with prioritized vulnerabilities
Use Case: Verify newly installed skills for safety before integrations and automation

Quick Start

Run a full security audit on all installed skills to identify potential issues and generate a detailed report.

Frequently Asked Questions about check-malicious-code

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit installed skills for malicious code and hidden instructions?▼

To audit installed skills for malicious code, you run a full security scan that detects hidden instructions and vulnerabilities across all official, example, and user directories. It produces a structured report prioritizing the identified risks.

What is pattern-based detection for malicious code in skill files?▼

Pattern-based detection uses regex to scan skill files like SKILL.md, scripts, and documentation for malicious code. It applies context-aware analysis with line-level context and a predefined whitelist to accurately identify vulnerabilities.

How do I verify newly installed skills for safety before integrating them into my workflow?▼

Verify newly installed skills for safety by executing a security audit before enabling them. This scans for malicious code and hidden instructions across your skill files, generating Markdown and JSON reports to review before integration.

Does the malicious code audit support whitelisting for safe patterns?▼

Yes, the malicious code audit supports a whitelist for safe patterns. It uses predefined pattern sets alongside contextual analysis to filter out safe code, ensuring the structured report only highlights genuine vulnerabilities.

Can I get a JSON report of security vulnerabilities found in installed skills?▼

Yes, you can get a JSON report of security vulnerabilities found in installed skills. The audit generates comprehensive reports in both Markdown and JSON formats, prioritizing the identified vulnerabilities for structured review.