SkillHub

agents-skill-security-audit

v0.1.0

Minimal helper to audit skill.md-style instructions for supply-chain risks.

Sourced from ClawHub, Authored by cerbug45

Installation

Please help me install the skill `agents-skill-security-audit` from SkillHub official store. npx skills add cerbug45/agents-skill-security-audit

security-audit

Minimal helper to audit skill.md-style instructions for supply-chain risks.

Features

  • Heuristic scan for exfiltration patterns (HTTP POST, curl to unknown domains, reading ~/.env, credential keywords).
  • Permission manifest reminder: lists filesystem/network touches it sees.
  • Safe report: markdown summary + risk level.

Usage

python audit.py path/to/skill.md > report.md