SkillWard

Security-audit a third-party skill bundle (folder with SKILL.md, or .zip / .tar.gz archive) before installing it, using the SkillWard cloud scanner. Trigger on any natural safety question about an external skill — "is this skill safe?", "audit / scan / review this skill", "should I install this?", "trustworthy?", "any malware?", "is it sketchy?" — even when the user doesn't name SkillWard explicitly. Do NOT trigger when the user is authoring their own skill, asking for a code review of code they wrote, or pointing at a built-in / first-party skill.