Yao Doctor Skill

Boundary

Own this recurring job: security-review skill packages as untrusted code and untrusted instructions, separate broad capability risk from actual unsafe behavior, and produce evidence-backed recommendations before the skills are installed or executed.

Do not route here for:

• generic code security reviews outside skill folders
• skill cleanup, archival, deduplication, or stale-usage analysis
• privacy policy writing without scanning files
• creating a brand-new skill with no security audit need

Default Workflow