skill-security-reviewer - Review agent skills for security threats
Reviews SKILL.md files and related components for prompt injection, code execution, data exfiltration, supply chain, and policy risks.
Tags
Updated: 2026-10-08Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Collect skill components
- Analyze claimed behavior
- Inspect actual behavior
- Detect prompt injection
- Assess code execution risks
- Check data exfiltration
- Review dependencies
- Generate security report
Inputs
- SKILL.md file
- Skill directory
- Repository URL
- Scripts
- References
- Assets
Outputs
- Structured security report
- PASS, FAIL, or INCOMPLETE verdict
- Analysis coverage record
- Per-file SHA-256 digests
- Package SHA-256 digest
Requirements
- Filesystem access
- Temporary directory access
- Repository download capability
- Archive inspection capability
- Binary analysis capability