Security Audit

About

Provides a systematic framework for evaluating the safety and integrity of Agent Skills by analyzing scripts, configuration files, and instruction sets. It guides the identification of suspicious network calls, unusual file operations, and potential data exfiltration risks, ultimately producing a detailed risk assessment report. This skill is essential for developers and system administrators who need to ensure that third-party or custom-built skills meet security standards before deployment in production environments.

Key Features

• Risk categorization from Critical to Informational
• 9 GitHub stars
• Systematic multi-step audit process for Skill directories
• Pattern analysis for network, file, and code execution risks
• Detection of hardcoded credentials and obfuscated code
• Standardized reporting format with executive summaries and mitigation steps

Use Cases

• Reviewing a third-party Agent Skill before installation
• Conducting regular security compliance checks on internal production tools
• Verifying that a Skill's implementation matches its stated functionality