skill-security-audit

What problem does it solve?

This Skill addresses the critical need to identify and mitigate security vulnerabilities within AI skills, ensuring the safety and integrity of automated workflows.

Core Features & Use Cases

• Vulnerability Scanning: Detects dangerous code patterns like eval(), exec(), os.system(), and subprocess calls with shell=True.
• Sensitive Data Detection: Flags potential hardcoded API keys, passwords, tokens, and access to sensitive directories (.ssh/, .aws/, .env).
• Use Case: Before deploying or integrating a new third-party skill, run this audit tool to proactively identify any malicious code, data exfiltration risks, or insecure practices.

Quick Start

Run the security audit on the skill located at /path/to/skill.