Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent skill-maintenance helper that uses local read-only analysis scripts and requires user confirmation before deleting anything.
Install only if you want an agent to help reorganize skill files. Review any proposed automatic reorganizations, and only approve deletions after confirming the backup exists and the listed files are truly stale.
The description says to trigger when the user asks to "clean up old versions" or when a skill is "too long/verbose or flaky," which are broad conditions that can overlap with ordinary maintenance requests. It does not clearly bound what kinds of cleanup are in scope or give exclusion examples, increasing the chance of unintended invocation.
The trigger text includes broad states like "too long," "burns too many tokens," and "behaves inconsistently," combined with generic requests like "clean up." These criteria lack precise thresholds or exclusion conditions, so agents may invoke the skill for many normal editing situations.
