Skill Scanner
Audit a SKILL.md before you install it
Sentry · Apache-2.0
When
Scan agent skills for security issues. Use when asked to "scan a skill", "audit a skill", "review skill security", "check skill for injection", "validate SKILL.md", or assess whether an agent skill is safe to install. Checks for prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks.
The Catch
Audits a SKILL.md for injection and secrets before install. Scanning is not the same as running the skill.
Embed
[](https://stackgems.com/skills/skill-scanner)