Skill Inspector

Goal

Decide whether an AI agent skill is safe to install, keep installed, or submit for review.

Use two independent review lines:

1. SkillSpector static evidence: deterministic scanning for known risk patterns.
2. Agent semantic review: source-aware judgment about intent, permission fit, hidden behavior, and user control.

Do not rely on the numeric score alone. A low score can miss semantic risk, and a high score can be justified when sensitive behavior is clearly documented, necessary, and bounded.

Operating Rules