skill-security-audit

To audit for prompt-injection risks, the skill reviews SKILL.md files across local and shared repositories, detecting unsafe configurations and flagging untrusted content for remediation.

A SKILL.md security audit validates frontmatter fields and checks for malicious content in your skill library. You need it before enabling or sharing skills to ensure provenance and safety.

You validate frontmatter fields by inventorying installed skills and verifying that required name and description fields are present and correctly configured, flagging any misconfigured files.

Yes, you can check potential external skills by applying the audit to vendor-provided and self-authored SKILL.md files across shared repositories to detect risky configurations.

Yes, the skill audit logs changes while enumerating SKILL.md files across the library, ensuring a verifiable history of modifications during the safety review process.