Security audit and vulnerability scanner for AI agent skills before installation. Use when: (1) evaluating a skill from an untrusted source, (2) auditing a skill directory or git repo URL for malicious code, (3) pre-install security gate for Claude Code plugins, OpenClaw skills, or Codex skills, (4) scanning Python scripts for dangerous patterns like os.system, eval, subprocess, network exfiltration, (5) detecting prompt injection in SKILL.md files, (6) checking dependency supply chain risks, (7) verifying file system access stays within skill boundaries. Triggers: "audit this skill", "is this skill safe", "scan skill for security", "check skill before install", "skill security check", "skill vulnerability scan".
$npx -y skills add adriannoes/awesome-agentic-ai --skill skill-security-auditorInstalls into the current project.
Run `npx skills use "https://github.com/adriannoes/awesome-agentic-ai" --skill "adriannoes/awesome-agentic-ai/skill-security-auditor"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/adriannoes/awesome-agentic-ai" that are relevant to the current task. Run `npx skills add "https://github.com/adriannoes/awesome-agentic-ai"` and select the relevant skills, then follow their instructions.