Agent skill · security · sickn33
audit-skills
Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads across Windows, macOS, Linux/Unix, and Mobile (Android/iOS).
Why this skill is useful
Adds executable scripts for static analysis that identify security vulnerabilities across multiple platforms.
What it needs
Requires claude, gemini, gpt, llama, mistral installed locally. About 3k tokens when loaded. Last updated 2026-08-07. 44,571 stars on the source repository.
What this skill does
Audit Skills (Premium Universal Security) Overview Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads across Windows, macOS, Linux/Unix, and Mobile (Android/iOS). 2-4 sentences is perfect. When to Use This Skill Use when you need to audit AI skills and bundles for security vulnerabilities Use when working with cross-platform security analysis Use when the user asks about verifying skill legitimacy or performing security reviews Use when scanning for mobile threats in AI skills How It Works Step 1: Static Analysis Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads. Step 2: Platform-Specific Threat Detection Analyzes code for platform-specific security issues across Windows, macOS, Linux/Unix, and Mobile (Android/iOS). 1. Privilege, Ownership & Metadata Manipulation Elevated Access: sudo, chown, chmod, TakeOwnership, icacls, Set-ExecutionPolicy. Metadata Tampering: touch -t, setfile (macOS), attrib (Windows), Set-ItemProperty, chflags. Risk: Unauthorized access, masking activity, or making files immutable. 2. File/Folder Locking & Resource Denial Patterns: chmod 000, chattr +i (immutable), attrib +r +s +h, Deny ACEs in icacls. Global Actions: Locking or hiding folders in %USERPROFILE%, /Users/, or /etc/. Risk: Denial of service or data locking. 3. Script Execution & Batch Invocation Legacy/Batch Windows: .bat, .cmd, cmd.exe /c, vbs, cscript, wscript. Unix Shell: .sh, .bash, .zsh, chmod +x followed by execution. PowerShell: .ps1, powershell -ExecutionPolicy Bypass -File .... Hidden Flags: -WindowStyle Hidden, -w hidden, -noprofile. 4. Dangerous Install/Uninstall & System Changes Windows: msiexec /qn, choco uninstall, reg delete. Linux/Unix: apt-get purge, yum remove, rm -rf /usr/bin/.... macOS: brew uninstall, deleting from /Applications. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills sickn33/audit-skills