Skill Audit — Pre-Install Security Scanner

Overview

This is a six-phase manual review framework, not an implemented malware scanner. The upstream prevalence and incident claims are not supported by primary evidence bundled here; do not report them as verified measurements.

When to Use This Skill

• Use when you're about to install a third-party skill from GitHub, ClawHub, or any registry
• Use when you want to verify a skill's security before adding it to your agent
• Use when the user says "install this skill" or "add this skill"
• Use when reviewing skills for potential security issues

How It Works

Phase 1: Surface Scan