skill-safety-audit

name	skill-safety-audit
description	Use when reviewing a new or changed skill for unsafe instructions, hidden side effects, credential access, installers, or permission inflation; use skill-writing for authoring and update-claude-documentation for router maintenance.
metadata	{"portable":true,"compatible_with":["claude-code","codex"]}

Skill Safety Audit

Acknowledgement: Shared by Peter Bamuhigire, techguypeter.com, [phone].

Review a skill and its linked scripts or references for safety defects without changing the target by default.

Use When

• A skill is new or materially changed
• linked scripts install software or access external systems
• a reviewer needs a release safety verdict.

Do Not Use When

• Use skill-writing to author the contract. Do not use this audit as permission to edit the target skill.

Required Inputs

Artefact	Source or provider	Required?	Purpose	If absent
Skill directory and complete diff	Repository and change author	yes	Inspect instructions, references, and scripts	Stop if the target or linked executable surface is unavailable

Workflow

1. Confirm read-only scope and enumerate the full skill surface
2. Inspect instructions, links, scripts, permissions, and side effects
3. Classify evidence by severity and stop acceptance on an unresolved critical or high finding