skill-auditor

Audit a third-party Agent skill for security risks BEFORE installing it. Use this whenever the user wants to install, add, clone, or try a skill from GitHub or from a stranger; asks "is this skill safe?", "is this skill malicious?", "review/scan/audit this skill", "check this skill before I install it"; or points at a skill directory path or repo URL. Scans every SKILL.md, reference, and script for prompt injection, data exfiltration, dangerous shell commands, credential theft, obfuscated payloads, logic bombs, and hidden behavior that does not match the skill's stated purpose, then returns a CRITICAL/WARNING/INFO report and a SAFE TO INSTALL / REVIEW BEFORE INSTALL / DO NOT INSTALL verdict. Trigger even if the user never says the words "skill-auditor".

Convert a CSV file into a clean GitHub-flavored Markdown table. Use when the user wants to turn comma-separated data into a Markdown table, paste CSV as a table, or render tabular data in a document.

Formats and polishes your README and Markdown files - fixes headings, wraps long lines, and tidies tables. Use whenever the user wants to format, prettify, or clean up Markdown documents.