reviewing-agent-skills

A security audit for agent skills validates YAML frontmatter, verifies folder structures, applies language guards, and tests defense against prompt injection to produce a compliance report.

Static analysis for skill structure validates YAML frontmatter and folder hierarchy. You need it during skill creation, post-mortem analysis, and pre-commit checks to ensure safety compliance.

Yes, a QA auditor evaluates protocol integrity and environment guards to generate risk scores, providing remediation guidance for identified safety and compliance gaps.

Yes, the skill auditing process explicitly checks YAML frontmatter validity and folder structure through static analysis to ensure new agent skills meet structural compliance standards before deployment.

To generate a SKILL_AUDIT.md report, run a fresh skill draft through Gauntlet standards to verify structure, safety guardrails, and compliance, outputting the audit document.

Automated red-team testing for agent skills focuses on static analysis, protocol integrity, and environment guards, meaning it may not detect dynamic runtime vulnerabilities outside predefined compliance checks.