Local Security Check for Skills

Local security check Skill for detecting security risks in SKILL.md files and ensuring the security of the Skills repository. Checks whether Skills comply with security best practices from the Agent Skills Specification.

Inspection Flow

1. Format validation: YAML frontmatter, required fields, naming conventions
2. Prompt injection detection: Suspicious directives, system calls, file operations
3. Sensitive information detection: Hard-coded credentials, API keys, passwords
4. Script risk detection: scripts/ directory, executable scripts
5. Compliance check: Security best practices

Why This Matters

Based on arXiv research, 26.1% of Skills contain at least one vulnerability. Key risks include: