Audit agent skill artifacts for malicious threat chains and structural vulnerabilities.
npx skills add https://github.com/0xUrsanomics/utopia-os --skill skill-audit-0xursanomics
Please help me install this Agent Skill. Skill: skill-audit Source: https://github.com/0xUrsanomics/utopia-os/tree/main/skills/skill-audit Command: npx skills add https://github.com/0xUrsanomics/utopia-os --skill skill-audit-0xursanomics
This skill mitigates the risk of installing malicious or poorly constructed agent workflows by performing a deep structural security audit before any code is executed.
Run the skill audit on the target skill directory to generate a comprehensive safety report.
High-intent search queries and answers about installing and using this skill.
A security audit detects hidden overrides, disguised data exfiltration, and unauthorized remote bootstrapping by analyzing cross-file dependencies, execution primitives, and behavioral claims within the skill artifacts.
Static structural security analysis evaluates skill artifacts without executing code, identifying malicious threat chains and structural vulnerabilities by validating skill integrity against established security research benchmarks.
No additional dependencies are required to run the skill audit. You simply run the audit on the target skill directory to generate a comprehensive safety report validating its structural integrity.
An agent skill risk assessment detects hidden overrides, disguised data exfiltration, unauthorized remote bootstrapping, missing human gates, behavior-claim contradictions, and dangerous execution primitives.
No dependencies are required to run a pre-install security audit on agent skills. The tool operates directly on the target skill directory scripts to generate a comprehensive safety report.
opensage-agentExecute custom Python fuzzer scripts to detect crashes and stability issues.
ZateGenerate structured security audit reports with findings, severity, and ASVS mappings.
lapc506Scan container images with Trivy, monitor runtime with Falco, and sign images with Notary.
GhostPWNExtract hashes, strings, imports, and entropy from suspicious binaries.
