skill-audit

Name: skill-audit
Availability: InStock
Author: AbsolutelySkilled

Audit AI agent skill directories for security vulnerabilities and structural quality.

207|31|Updated Mar 14, 2026

Search Tags:#security #audit #safety #registry #ai-agent #prompt-injection

Ready to run

npx skills add https://github.com/AbsolutelySkilled/AbsolutelySkilled --skill skill-audit-absolutelyskilled

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: skill-audit
Source: https://github.com/AbsolutelySkilled/AbsolutelySkilled/tree/main/skills/skill-audit
Command: npx skills add https://github.com/AbsolutelySkilled/AbsolutelySkilled --skill skill-audit-absolutelyskilled

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pyyaml, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Auditing AI agent skills for security vulnerabilities, prompt injection, permission abuse, supply chain risks, or structural quality to prevent unsafe deployments and risky configurations.

Core Features & Use Cases

Deep security audits of AI agent skills across SKILL.md, references/, scripts/, and evals.json to identify vulnerabilities, improper prompts, risky dependencies, and quality gaps.
Generates actionable findings with severity, category, and remediation guidance, plus both human-readable and machine-readable outputs.
Supports single-skill audits and batch registry scans, enabling governance for large skill registries.

Quick Start

Request a security audit for a given skill directory to receive a structured report.

Frequently Asked Questions about skill-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit AI agent skills for security vulnerabilities and prompt injection?▼

To audit AI agent skills for security vulnerabilities and prompt injection, you analyze the skill directory including SKILL.md, references, scripts, and evals.json to identify supply chain risks and structural quality issues, producing structured findings and a final verdict.

How do I scan a registry of AI agent skills for supply chain risks?▼

You can scan a registry of AI agent skills for supply chain risks by running batch audits across the entire skill registry, enforcing frontmatter metadata validation and evals presence, to generate structured findings and machine-readable reports for governance.

What is checked during an AI agent skill structural quality audit?▼

An AI agent skill structural quality audit checks frontmatter metadata validation, presence of evals, and analyzes SKILL.md, references, scripts, and evals.json to identify quality gaps and output actionable findings with severity and category.

Does the security audit require evals.json to be present in the skill directory?▼

The security audit enforces the presence of evals as part of its structural quality check. It analyzes the skill directory including evals.json to identify vulnerabilities, improper prompts, and structural quality gaps before producing a deployment verdict.

Can I get machine-readable reports for AI agent skill security audits?▼

Yes, the security audit generates both human-readable and machine-readable reports. It produces actionable findings with severity, category, and remediation guidance for single-skill audits and batch registry scans.

Do I need pyyaml installed to run an AI agent skill security audit?▼

Yes, pyyaml is a required dependency to run the security audit. It processes the skill directory components including SKILL.md and frontmatter metadata to validate structure and identify prompt injection risks.