Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward local quality auditor for Codex skills and does not show hidden, destructive, persistent, or data-exfiltrating behavior.
Install only if you want Codex to run a local audit helper over skill folders you provide. Expect it to read the target skill's SKILL.md and nearby skill metadata/resources, and review its output as a quality assessment rather than a security guarantee.
Referenced artifact was not completely inspected
ript reports missing context or borderline results, inspect the target skill's `SKILL.md` and any referenced resources before writing the final judgment.
Referenced artifact was not completely inspected
ript reports missing context or borderline results, inspect the target skill's `SKILL.md` and any referenced resources before writing the final judgment.
Referenced artifact was not completely inspected
ript reports missing context or borderline results, inspect the target skill's `SKILL.md` and any referenced resources before writing the final judgment.
Without declared permissions the skill's intent is opaque and cannot be validated.
The description says to use the skill when Codex is given a skill folder and needs to judge whether the skill is qualified, but it does not define clear trigger boundaries or exclusions. Combined with generic review-oriented wording, this can cause the skill to match ordinary requests like 'review this skill' without enough domain-specific constraints.
Examples like 'Review this skill and tell me if it passes' and 'Evaluate this skill against best practices' are close to everyday review language and do not clearly distinguish this skill from general auditing or editing tasks. The file provides no negative examples to clarify when the skill should not activate.
The example 'Check whether this skill is规范合格.' mixes in a Chinese phrase despite no documented language or locale requirement elsewhere in the file. This introduces a language-specific example without user opt-in or justification, which can conflict with language/locale policy expectations.