Security audit
Security checks for vulnerabilities and agentic risk
This skill is a local SKILL.md linter/advisor with no evidence of hidden network access, persistence, exfiltration, or destructive behavior.
Install only if you want a SKILL.md-focused linter/advisor. It can read and potentially edit/write skill files when used by an agent, so review suggested changes before accepting them; the bundled CLI itself only reads the file path you provide and prints a report.
The description is broadly phrased to trigger on generic review, creation, audit, or improvement requests for SKILL.md files, which can overlap with ordinary editing or review workflows. This increases the chance of unintended activation, causing the agent to apply this skill in situations where a narrower or more security-aware skill would be more appropriate.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
def main():
if len(sys.argv) < 2:
print("用法: python3 skill_linter.py <SKILL.md 路径>")
print("示例: python3 skill_linter.py ~/.claude/skills/my-skill/SKILL.md")
sys.exit(1)
filepath = sys.argv[1]
The module and function docstrings present this as a SKILL.md checker, which implies analysis of the file even when some sections are malformed. However, the code only runs analyze_frontmatter and analyze_content when result.frontmatter is truthy, so files with missing or invalid frontmatter are not fully analyzed despite the stated intent.
This code file contains natural-language strings that force a specific language/locale for the skill's documentation and interaction. Under the policy, hard-coding a language without user opt-in is a natural-language policy concern unless the locale restriction is explicitly justified.
The manifest describes a skill for reviewing, creating, or improving SKILL.md files in a general sense. In practice, this implementation is a narrow command-line linter that reads one local file path and prints a report, which is a more limited behavior than the manifest suggests.