Security auditor for Claude skills, MCP servers, and pre-publish deployments. Use PROACTIVELY, not only when asked. Trigger whenever: a skill or MCP is about to run, is newly installed, or changed; the first time a skill/MCP is used this session; an MCP config, settings.json, or .mcp.json is edited; OR before pushing, publishing, deploying, or uploading anything to GitHub, npm, a website, or any production surface. It vets skills & MCPs for hidden-instruction, exfiltration, and supply-chain risk (including following external links and re-checking that a trusted redirect wasn't repointed to something hostile), and runs an exposure gate that blocks secrets, API keys, tokens, PII, and EXIF from being published. Token-cheap: a deterministic hash-diff runs first and stops when nothing changed. Triggers on: "is this skill safe", "audit my MCPs", "check before I push", "security review of my skills", "scan for secrets before publishing".
2026-06-24