Skill Scorer

• Risk level: Low
• Analyzed: Apr 2, 2026, 9:12 AM
• Findings: 0
• Version: 1.0.0

Overview

The skill is an instruction-only meta-skill whose requested files and instructions align with its stated purpose (evaluating SKILL.md files); it asks for no credentials, installs nothing, and its behavior is coherent with its description.

This skill appears coherent and safe for its stated purpose: auditing SKILL.md files. Things to consider before installing or running it: (1) it will fetch and evaluate user-provided URLs/GitHub links — only provide links you trust and be aware the agent may retrieve remote content; (2) the skill can generate 'auto-fix' versions of SKILL.md — always review any generated changes before applying them; (3) although it requests no secrets, avoid pasting sensitive credentials or private keys into files you ask it to fetch or evaluate. If you want higher assurance, ask the maintainer to explicitly document how fetched remote content is handled (read-only analysis vs. execution) and to add a reminder not to include secrets in submitted skill artifacts.