Check agent skills before you trust their code.
Checks agent skills for security risks and gives a verdict on whether they are safe to install.
When to use it
Use when asked to scan, audit, vet, review, or check the safety of a skill, plugin, or agent tool.
Give it a skill folder, manifest, archive, or repository URL; it returns a security verdict with cited findings and remediation advice.
What you provide
Requires Python 3 to run the bundled scanner.
This skill
GitHub
Fetches skill repositories from GitHub
temporary extraction directory
Extracts archives into temporary storage