skill-security-auditor

Community

Audit skills for security risks.

Authorzhangzhang-111-i
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill acts as a crucial security gate, scanning AI agent skills for potential vulnerabilities and malicious code before they are installed, protecting users from security threats.

Core Features & Use Cases

  • Code Scanning: Analyzes Python, Bash, and JavaScript scripts for dangerous patterns like command injection, code execution, and network exfiltration.
  • Prompt Injection Detection: Scans SKILL.md and reference files for attempts to override instructions, bypass safety filters, or exfiltrate data.
  • Dependency Analysis: Checks for typosquatting, unpinned versions, and runtime installation of packages.
  • Filesystem Auditing: Identifies suspicious file access, hidden files, and binary executables.
  • Use Case: Before installing a new skill from an unknown source, run this auditor to get a PASS/WARN/FAIL verdict, ensuring your AI environment remains secure.

Quick Start

Use the skill-security-auditor to audit the local skill directory located at '/path/to/skill-name/'.

Dependency Matrix

Required Modules

None required

Components

scriptsreferences

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: skill-security-auditor
Download link: https://github.com/zhangzhang-111-i/claude-skills111/archive/main.zip#skill-security-auditor

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.