Skill Security Auditor

Review an AI skill file or system prompt for instructions that could harm whoever installs or runs it. Skills are plain text, but plain text can still tell a model to leak data, run destructive commands, or ignore its guidelines. This skill produces a structured safety verdict.

When to use

• Vetting a skill from an untrusted or community source before installing it
• Reviewing a contributed SKILL.md in a pull request
• Checking a system prompt / custom instruction for prompt-injection risks

Required Inputs

Ask for these if not provided:

• The skill / prompt content to audit (paste it, or the file path)
• Any bundled scripts the skill ships (these matter as much as the prose)
• Where it came from (source/author) and how it will run (auto-loaded vs. manual)

What to Check