skills

Use when conducting a security review of a codebase using an agent team with deterministic tools and expert analysis. Triggers on requests to review, audit, or assess security posture of a repository.

Systematic security audit of Claude Code skills and plugins. Detects prompt injection, backdoors, data exfiltration, and permission escalation. Use before installing untrusted skills or to audit already-installed plugins.