Skill Auditor — Security skill for Claude Code

English · Español

A skill is software. Skill Auditor reviews it before you give it access to your files, your keys and your terminal.

---

Why this exists

A skill is a `SKILL.md` your agent will **obey**, plus scripts it will **run with your permissions and your credentials**. The ecosystem is huge (an August 2026 census counted about 58,700 skills among nearly 80,000 listings including MCP servers and plugins) and curation is thin: installing a skill without reading it is the same as running a script you downloaded from the internet.

**Skill Auditor** is a skill that reviews other skills (and MCP server configurations) before you install them, and gives you a **verdict backed by evidence**: what it found, in which file and line, and what to do about it.

• Two layers: a fast static scanner (scan_skill.py) and a guided critical reading, because no pattern list is enough on its own.
• Nothing from the target is ever executed. No scripts, no installers, no "quick tests".
• Intent vs. capabilities: a formatting skill that reads ~/.ssh is suspicious even if its code is clean.
• Zero dependencies: Python's standard library only.

**Heads-up on lang