skill-security-auditor

Topics in the source

• Skill Security Auditor
• Quick Start
• What Gets Scanned
• 1. Code Execution Risks (Python/Bash Scripts)
• 2. Prompt Injection in SKILL.md
• 3. Dependency Supply Chain
• 4. File System & Structure
• Audit Workflow

Scan and audit AI agent skills for security risks before installation. Produces a clear PASS / WARN / FAIL verdict with findings and remediation guidance. Scans all .py, .sh, .bash, .js, .ts files for: | Category | Patterns Detected | Severity | |----------|-------------------|----------| | Command injection | os.system(), os.popen(), subprocess.call(shell=True), backtick execution | 🔴 CRITICAL | | Code execution | eval(), exec(), compile(), import() | 🔴 CRITICAL | | Obfuscation | base64-encoded payloads, codecs.decode, hex-encoded strings, chr() chains | 🔴 CRITICAL | | Network exfiltration | requests.post(), urllib.request, socket.connect(), httpx, aiohttp | 🔴 CRITICAL | | Credential harvesting | reads from /.ssh, /.aws, /.config, env var extraction patterns | 🔴 CRITICAL | | File system abuse | writes outside skill dir, /etc/, /.bashrc, /.profile, symlink creation | 🟡 HIGH | | Privilege escalation | sudo, chmod 777, setuid, cron manipulation | 🔴 CRITICAL | | Unsafe deserialization | pickle.loads(), yaml.load() (without SafeLoader), marshal.loads() | 🟡 HIGH | | Subprocess (safe) | subprocess.run() with list args, no shell | ⚪ INFO | Scans SKILL.md and all .md reference file

This is an excerpt. Refer to the complete source and its current requirements.