skill-safety-audit
Installation
SKILL.md
Skill Safety Audit
Inspect skill instructions and bundled resources for actions that could compromise the operator, repository, or managed systems.
Use When
- A skill is created, imported, or gains scripts, dependencies, setup steps, or privileged actions.
- A changed reference introduces remote downloads, credential handling, network transfer, or system mutation.
- Release needs a recorded
Safe,Needs Review, orUnsafedecision.
Do Not Use When
- General application or shell-code review is the only task; use the relevant engineering or Bash review workflow.
- The work is structural skill normalisation without changed operational instructions; use
skill-writingand its validators. - The user has separately authorised remediation; this audit remains read-only and reports fixes rather than applying them.