Security-audit a third-party skill bundle (folder with SKILL.md, or .zip / .tar.gz archive) before installing it, using the SkillWard cloud scanner. Trigger on any natural safety question about an external skill — "is this skill safe?", "audit / scan / review this skill", "should I install this?", "trustworthy?", "any malware?", "is it sketchy?" — even when the user doesn't name SkillWard explicitly. Do NOT trigger when the user is authoring their own skill, asking for a code review of code they wrote, or pointing at a built-in / first-party skill.
$npx -y skills add fangcun-ai/skillward --skill skillward-audit-skillInstalls into the current project.
Run `npx skills use "https://github.com/fangcun-ai/skillward" --skill "fangcun-ai/skillward/skillward-audit-skill"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/fangcun-ai/skillward" that are relevant to the current task. Run `npx skills add "https://github.com/fangcun-ai/skillward"` and select the relevant skills, then follow their instructions.