Audit Agent Skill

Review the exact source revision that would be installed. Separate structural validity, behavioral risk, provenance, and portability in the verdict.

Workflow

1. Resolve the repository, revision, and exact skill directories in scope.
2. Read every selected SKILL.md completely.
3. Follow and inspect every referenced file. Inspect all bundled scripts without executing them by default.
4. Read the repository license, security policy, recent history, and ownership.
5. Apply the review checklist.
6. Run only non-executing checks such as YAML parsing, link validation, secret scanning, and shell syntax validation.
7. Report an allow, conditional allow, or reject verdict for each selected skill.

Guardrails