Spot security risks in skills before you install.
Audits agent skills, plugins, and tool definitions to produce a security risk report with cited findings and remediation guidance.
When to use it
Use before installing third-party skills, for periodic audits, or when a skill requests unusual permissions or behaves unexpectedly.
Give it skill files, a directory path, a GitHub URL, or a request to scan installed skills; it confirms the file list and returns a structured security report.
What you provide
No setup requirements listed.
This skill
GitHub
Reads skill repositories on GitHub
~/.claude/plugins/cache/
Reads installed Claude Code plugins
~/.cursor/extensions/
Reads installed Cursor extensions
~/.codeium/windsurf/
Reads installed Windsurf files