skill-security-auditor

To scan AI agent skills for security vulnerabilities before deployment, run a Python static analysis script on the skill directory to detect malicious patterns, command injection, and network exfiltration. This process checks scripts and SKILL.md files to ensure safe installation.

Security auditing for AI agent skills is the process of detecting malicious patterns and code execution risks in skill directories before installation. You need it before deploying any new skill to prevent command injection, network exfiltration, and prompt injection attacks.

Yes, you can detect prompt injection risks in SKILL.md files by running a security audit on the skill directory. The auditing process specifically checks SKILL.md files for prompt injection vulnerabilities and mitigates these risks before deployment.

Yes, security auditing works with both Python and Bash scripts to detect command injection and code execution vulnerabilities. The scanner requires Python for execution to analyze script files for malicious patterns and network exfiltration risks.

To check dependencies for known vulnerabilities in AI skills, run a dependency analysis during the security audit. This identifies known vulnerabilities, typosquatting, and other security issues in the skill's dependencies before you install it.

Static analysis for AI skill security scanning requires Python to run and focuses on detecting known malicious patterns, command injection, and code execution risks in Python and Bash scripts. It may not catch dynamically generated threats or zero-day vulnerabilities.