Name: mtthwmllr/skill-safety-auditor
Rating: 97.8 (1 reviews)
Author: mtthwmllr

mtthwmllr/skill-safety-auditor

Audits a Claude Code skill for security risks in three modes: before download (from a URL or install command), after download but before install (from a .skill file), or after install (from a local skills directory). Use this skill whenever a user is about to install a skill from any source — including GitHub URLs, git clone commands, npx/npm commands, curl/wget downloads, pip installs, marketplace links, or raw SKILL.md URLs. Also trigger when a user asks "is this skill safe?", "should I trust this skill?", "can you check this before I install it?", "audit this skill", or pastes any link to a skill repository or .skill file. If a user mentions installing ANY skill, proactively offer to audit it first — do not wait for them to ask.

1.28x

Quality

97%

Does it follow best practices?

Impact

99%

1.28x

Average score across 5 eval scenarios

Securityby

Advisory

Suggest reviewing before use

{
  "name": "skill-safety-auditor",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "dependencies": {
        "@vercel/speed-insights": "^2.0.0"
      }
    },
    "node_modules/@vercel/speed-insights": {
      "version": "2.0.0",
      "resolved": "https://registry.npmjs.org/@vercel/speed-insights/-/speed-insights-2.0.0.tgz",
      "integrity": "sha512-jwkNcrTeafWxjmWq4AHBaptSqZiJkYU5adLC9QBSqeim0GcqDMgN5Ievh8OG1rJ6W3A4l1oiP7qr9CWxGuzu3w==",
      "license": "Apache-2.0",
      "peerDependencies": {
        "@sveltejs/kit": "^1 || ^2",
        "next": ">= 13",
        "nuxt": ">= 3",
        "react": "^18 || ^19 || ^19.0.0-rc",
        "svelte": ">= 4",
        "vue": "^3",
        "vue-router": "^4"
      },
      "peerDependenciesMeta": {
        "@sveltejs/kit": {
          "optional": true
        },
        "next": {
          "optional": true
        },
        "nuxt": {
          "optional": true
        },
        "react": {
          "optional": true
        },
        "svelte": {
          "optional": true
        },
        "vue": {
          "optional": true
        },
        "vue-router": {
          "optional": true
        }
      }
    }
  }
}

mtthwmllr/skill-safety-auditor

package-lock.json