# Skill security auditor

> Scans a skill before you install it for prompt injection, hidden text, network calls, shell execution and credential reads.

Canonical: https://mikereams.com/ai/skill-security-auditor

Skill · Curated · Security · updated 2026-08-20. Part of the [AI Library](https://mikereams.com/ai).

What you get: A pass or fail report on a skill folder, with each risky line flagged.

- Every skill on this page went through it, then a manual read of every file.
- Use it as a first pass, not the only gate: its curl rule misses file uploads sent with curl -F.

Source: [alirezarezvani/claude-skills](https://github.com/alirezarezvani/claude-skills/tree/aa8d778/engineering/skills/skill-security-auditor) by Alireza Rezvani (MIT), reviewed at aa8d778. Not hosted here.

Reviewed 2026-08-20.

Tags: supply chain, prompt injection, skills