Scans AI agent skill directories for dangerous bash patterns, prompt injection, supply chain risks, and SKILL.md structure violations. Use when reviewing, validating, or security-auditing a skill before deployment — or when asked to check a skill for security issues, prompt injection, hardcoded secrets, or compliance with Anthropic's authoring guidelines.
A skill with a Cyrillic а instead of a
Fixture exercising every PII rule. Use only in tests.
Fixture exercising every obfuscation rule. Use only in tests.
Fixture exercising every malicious-URL rule. Use only in tests.
A skill whose name does not match its directory. Use when testing the name-directory-mismatch rule.
Performs safe read-only filesystem operations. Use when the user needs to search, list, or inspect files without making changes.