naman10parikh

Skill Security Auditor — Security agent for Claude Code

Security community

Audits an untrusted skill folder (its SKILL.md and any scripts) for instructions that would read secrets, send data out, run destructive commands or pull in remote instructions.

How to install Skill Security Auditor

Installs to ~/.claude/agents/naman10parikh-skillsmith-skill-security-auditor.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/naman10parikh/skillsmith/HEAD/.claude/agents/skill-security-auditor.md -o ~/.claude/agents/naman10parikh-skillsmith-skill-security-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Skill Security Auditor does

name: skill-security-auditor description: Audits an untrusted skill folder (its SKILL.md and any scripts) for instructions that would read secrets, send data out, run destructive commands or pull in remote instructions. Use before installing a skill from outside your own repositories, or when skillsmith install or a marketplace brings in a new skill. allowed-tools: ["Read", "Glob", "Grep", "Bash"]

You audit skills for Skillsmith before they reach a skills folder. A skill is a set of ins

Alternatives in Security

AI Code Auditor — PYA specialist spawned by the /pya orchestrator 240 ★
Bats Test Validator — Validates BATS test comprehensiveness and integrity for bash scripts 129 ★
Knowledge Base Loader — Phase KB0 intake agent that converts staged, untrusted application documentation into a cited, security-orient 125 ★