Security audit
Skill Quality Auditor
Security checks for vulnerabilities and agentic risk
Overview
This skill is a Markdown-only skill quality auditor that reads a user-specified skill folder and produces a rubric-based scorecard, with no hidden code or external data transfer found.
Install this if you want an agent to review and score other skills. When using it, provide the exact skill folder rather than a repository root or home directory, because the workflow instructs the agent to read files in the supplied path and produce a report.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.