oxidized-agentic-audit

Scans AI agent skill directories for dangerous bash patterns, prompt injection, supply chain risks, and SKILL.md structure violations. Use when reviewing, validating, or security-auditing a skill before deployment — or when asked to check a skill for security issues, prompt injection, hardcoded secrets, or compliance with Anthropic's authoring guidelines.

A skill with a Cyrillic а instead of a

Fixture exercising every PII rule. Use only in tests.

Fixture exercising every obfuscation rule. Use only in tests.

Fixture exercising every malicious-URL rule. Use only in tests.

A skill whose name does not match its directory. Use when testing the name-directory-mismatch rule.

Performs safe read-only filesystem operations. Use when the user needs to search, list, or inspect files without making changes.