| name | audit-skills |
| description | Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads across Windows, macOS, Linux/Unix, and Mobile (Android/iOS). |
| type | skill |
| created | 2026-02-27T00:00:00.000Z |
| domain | security |
| category | compliance |
| risk | safe |
| source | community |
| tags | ["skill","security","compliance","audit"] |
Audit Skills (Premium Universal Security)
Overview
Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads across Windows, macOS, Linux/Unix, and Mobile (Android/iOS).
2-4 sentences is perfect.
When to Use This Skill
- Use when you need to audit AI skills and bundles for security vulnerabilities
- Use when working with cross-platform security analysis
- Use when the user asks about verifying skill legitimacy or performing security reviews
- Use when scanning for mobile threats in AI skills
How It Works
Step 1: Static Analysis
Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads.
Step 2: Platform-Specific Threat Detection
Analyzes code for platform-specific security issues across Windows, macOS, Linux/Unix, and Mobile (Android/iOS).
1. Privilege, Ownership & Metadata Manipulation
- Elevated Access:
sudo, chown, chmod, TakeOwnership, icacls, Set-ExecutionPolicy.
- Metadata Tampering:
touch -t, setfile (macOS), attrib (Windows), Set-ItemProperty, chflags.
- Risk: Unauthorized access, masking activity, or making files immutable.
2. File/Folder Locking & Resource Denial
- Patterns:
chmod 000, chattr +i (immutable), attrib +r +s +h, Deny ACEs in icacls.
- Global Actions: Locking or hiding folders in
%USERPROFILE%, /Users/, or /etc/.
- Risk: Denial of service or data locking.
3. Script Execution & Batch Invocation
- Legacy/Batch Windows:
.bat, .cmd, cmd.exe /c, vbs, cscript, wscript.
- : , , , followed by execution.
