Skill Test Skill

• Risk level: Low
• Analyzed: Apr 2, 2026, 7:37 AM
• Findings: 0
• Version: 0.1.0

Overview

The skill's requests and runtime instructions are coherent with its stated purpose (auditing other skills); no unexplained privileges or installs are present, but the skill's instruction to 'read every file' can expose sensitive data if used carelessly.

This skill is coherent for auditing skills, but be careful: when you run it, only point it at repositories or paths you control. Do NOT point it at system directories, multi-repo workspaces, or any directory that may contain secrets (API keys, private configs, credentials). If you want a lower-risk audit, provide only the SKILL.md or a trimmed copy of the repository (remove secrets and large binaries) or run the auditor in an isolated environment. Consider asking for a mode that omits quoting full file contents or that restricts checks to SKILL.md and references/ files only.