security-audit

Detect malicious patterns and generate Markdown/JSON security reports for installed skills.

Updated Feb 10, 2026
One-click install
npx skills add https://github.com/pachoroa/mis_skills --skill security-audit-pachoroa
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-audit
Source: https://github.com/pachoroa/mis_skills/tree/main/.github/skills/security-audit-skill
Command: npx skills add https://github.com/pachoroa/mis_skills --skill security-audit-pachoroa

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Audit installed skills for malicious code, hidden instructions, and security vulnerabilities. Use when users want to verify skill safety before use, or investigate suspicious skill behavior.

Core Features & Use Cases

  • Scans installed skills for patterns of risk, including remote code execution, hidden HTML comments, and dangerous system modifications.
  • Performs context-aware analysis and generates detailed Markdown and JSON security reports.
  • Provides executive summaries, per-skill findings, and actionable remediation guidance.

Quick Start

Run the security-audit skill to scan all installed skills for security issues.

Frequently Asked Questions about security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan installed skills for malicious code and security vulnerabilities?

To scan installed skills for malicious code, use a security audit tool that detects patterns of malicious behavior like remote code execution and hidden HTML comments. It generates structured risk reports with multi-level severity classification.

What is skill security auditing and how does it detect malicious behavior?

Skill security auditing is the process of identifying security risks in installed skills by detecting malicious behavior patterns. It performs context-aware analysis to uncover hidden instructions and dangerous system modifications across public, example, and user-installed skills.

Can I audit existing skill sets for security risks or does it only work on fresh installations?

You can audit both fresh installations and existing skill sets for security risks. The audit process scans all installed skills regardless of installation timing and generates detailed Markdown and JSON reports with per-skill findings.

What's the best way to generate structured security reports for installed skills?

The best way to generate structured security reports for installed skills is to run an automated security audit that provides executive summaries, per-skill findings, and actionable remediation guidance in detailed Markdown and JSON formats.

Does security auditing provide remediation guidance after detecting malicious patterns?

Yes, security auditing provides actionable remediation guidance after detecting malicious patterns. It delivers executive summaries and per-skill findings that identify security risks like dangerous system modifications and hidden instructions.

When should I run a security audit on my installed skills?

You should run a security audit on your installed skills before using new skills or when investigating suspicious skill behavior. It identifies security risks like remote code execution and hidden HTML comments through context-aware analysis.