skill-security-auditor

To check external skills for credential exposure, run a security audit on the target skill folder to identify secret leakage, unsafe command execution patterns, and external network calls across code and configurations.

The best way to review MCP configurations for security risks is using a structured audit that validates server setups, detects prompt injection risks, and enforces compliance checks on external contributions.

You detect data exfiltration attempts in automation scripts by applying code review guidance that scans for improper file access, unsafe command execution patterns, and unauthorized external network calls.

Yes, you can use a security audit to find prompt injection risks in contributed skills, as it provides structured checks to detect unsafe patterns and insecure code across skill assets.

Yes, this security audit works on repositories with varied automation scripts, applying checks for credentials exposure, network exfiltration, improper file access, and unsafe command execution patterns.