Security audit

Skill Safety Auditor

Security checks across malware telemetry and agentic risk

Overview

This is a coherent local skill-auditing tool, but users should treat scan output as sensitive and not rely on it as a complete security or CVE audit.

This skill appears safe to install for local, user-directed skill audits. Before using it, review the shell scripts, run them only against intended skill directories, keep scan output and audit reports private, and use additional professional tools for dependency/CVE and comprehensive security coverage.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dynamic_code_execution

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: scripts/audit-skill.sh:169

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: scripts/quick-scan.sh:46