skills-audit

Audit local agent skills for security and policy issues via SkillLens.

Updated Mar 1, 2026
One-click install
npx skills add https://github.com/vuxsoul-ui/catclash --skill skills-audit-vuxsoul-ui
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: skills-audit
Source: https://github.com/vuxsoul-ui/catclash/tree/main/skills/skill-audit
Command: npx skills add https://github.com/vuxsoul-ui/catclash --skill skills-audit-vuxsoul-ui

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit locally installed agent skills for security and policy issues using the SkillLens CLI to identify risky configurations and policy gaps before deployment.

Core Features & Use Cases

  • Scan a directory of skills with SkillLens to produce a risk-focused audit report based on each skill's SKILL.md and bundled resources.
  • Validate the presence and correctness of each skill's frontmatter and inspect bundled resources under scripts/, references/, and assets/ for evidence.
  • Generate actionable remediation guidance and documentation to reduce blast radius and improve policy compliance in CI/CD pipelines.

Quick Start

Run skilllens scan on the target directory to produce a risk-focused audit report.

Frequently Asked Questions about skills-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit agent skills for security and policy issues?

You can audit agent skills for security and policy issues by running a SkillLens scan on the target directory. This produces a risk-focused audit report based on each skill's SKILL.md and bundled resources to assess risk and guide remediation.

What does a skill security audit check for in local configurations?

A skill security audit checks for risky configurations and policy gaps by validating the correctness of each skill's frontmatter. It inspects bundled resources under scripts/, references/, and assets/ directories to surface evidence of security issues.

Can I use this audit skill to scan a directory of Codex or Claude skills?

Yes, you can use this audit skill to scan a directory of Codex or Claude skills. It applies to locally installed agent skills, producing a risk-focused audit report based on each skill's SKILL.md and bundled resources.

How do I enforce compliance validation for agent skill frontmatter?

To enforce compliance validation for agent skill frontmatter, run a SkillLens scan on the target directory. This process validates the presence and correctness of each skill's frontmatter and inspects bundled resources for evidence.

What is the best way to generate remediation guidance for risky skill configurations?

The best way to generate remediation guidance for risky skill configurations is to use SkillLens to scan the directory. It produces actionable remediation documentation to reduce blast radius and improve policy compliance in CI/CD pipelines.

Do I need any dependencies to run a risk-focused audit on agent skills?

No dependencies are required to run a risk-focused audit on agent skills. The skill operates independently to validate frontmatter and coordinate optional resources under scripts/, references/, and assets/ to assess risk.