Skill Security Auditor

Scan and audit AI agent skills for security risks before installation. Produces a clear PASS / WARN / FAIL verdict with findings and remediation guidance.

Purpose

Scan AI agent skill files for security vulnerabilities and produce a PASS/WARN/FAIL verdict with severity-ranked findings and remediation guidance before installation.

Trigger

Apply when:

• "audit skill security", "scan skill for vulnerabilities", "check skill for prompt injection"
• "validate skill safety before install", "security review skill", "skill security audit"
• Before installing any third-party skill from GitHub or a marketplace
• Running automated security gates in CI/CD for new skills