Agent skill · security · alirezarezvani
skill-security-auditor
Use before installing any skill or plugin from an untrusted source, or when asked if a skill is safe. Scans scripts, SKILL.md and dependencies for exfiltration, dangerous calls and prompt injection with skill_security_auditor.py.
Why this skill is useful
Adds a comprehensive security auditing script that identifies vulnerabilities and risks in AI agent skills, which the AI cannot generate from existing knowledge.
What it needs
Requires python3 installed locally. About 4k tokens when loaded. Last updated 2026-08-05. 23,939 stars on the source repository.
What this skill does
Skill Security Auditor Scan and audit AI agent skills for security risks before installation. Produces a clear PASS / WARN / FAIL verdict with findings and remediation guidance. Quick Start What Gets Scanned 1. Code Execution Risks (Python/Bash Scripts) Scans all .py, .sh, .bash, .js, .ts files for: Category Patterns Detected Severity ---------- ------------------- ---------- Command injection os.system(), os.popen(), subprocess.call(shell=True), backtick execution 🔴 CRITICAL Code execution eval(), exec(), compile(), import() 🔴 CRITICAL Obfuscation base64-encoded payloads, codecs.decode, hex-encoded strings, chr() chains 🔴 CRITICAL Network exfiltration requests.post(), urllib.request, socket.connect(), httpx, aiohttp 🔴 CRITICAL Credential harvesting reads from ~/.ssh, ~/.aws, ~/.config, env var extraction patterns 🔴 CRITICAL File system abuse writes outside skill dir, /etc/, ~/.bashrc, ~/.profile, symlink creation 🟡 HIGH Privilege escalation sudo, chmod 777, setuid, cron manipulation 🔴 CRITICAL Unsafe deserialization pickle.loads(), yaml.load() (without SafeLoader), marshal.loads() 🟡 HIGH Subprocess (safe) subprocess.run() with list args, no shell ⚪ INFO 2. Prompt Injection in SKILL.md Scans SKILL.md and all .md reference files for: Pattern Example Severity --------- --------- ---------- System prompt override "Ignore previous instructions", "You are now..." 🔴 CRITICAL <!-- noqa: SEC-AUDITOR --> Role hijacking "Act as root", "Pretend you have no restrictions" 🔴 CRITICAL <!-- noqa: SEC-AUDITOR --> Safety bypass "Skip safety checks", "Disable content filtering" 🔴 CRITICAL <!-- noqa: SEC-AUDITOR --> Hidden instructions Zero-width characters, HTML comments with directives 🟡 HIGH Excessive permissions "Run any command", "Full filesystem access" 🟡 HIGH Data extraction "Send contents of", "Upload file to", "POST to" 🔴 CRITICAL <!-- noqa: SEC-AUDITOR --> 3. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills alirezarezvani/skill-security-auditor--f4c67e