Minimal helper to audit skill.md-style instructions for supply-chain risks.
Scanned 9/5/2026
Install to Claude Code
Skills Directorynpx -y skills add dvcrn/openclaw-skills-marketplace --skill security-audit --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Security Audit?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/dvcrn-security-audit)More formats (shields.io, HTML) on the badges page.
---
name: security-audit
description: "Minimal helper to audit skill.md-style instructions for supply-chain risks."
---
# security-audit
Minimal helper to audit skill.md-style instructions for supply-chain risks.
## Features
- Heuristic scan for exfiltration patterns (HTTP POST, curl to unknown domains, reading ~/.env, credential keywords).
- Permission manifest reminder: lists filesystem/network touches it sees.
- Safe report: markdown summary + risk level.
## Usage
```bash
python audit.py path/to/skill.md > report.md
```
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
