# Skill Scanner

> Audit a SKILL.md before you install it

**Subcategory:** Sentry  
**License:** Apache-2.0  
**Source:** https://github.com/getsentry/skills/blob/main/skills/skill-scanner/SKILL.md

---

## When it is useful

Scan agent skills for security issues. Use when asked to "scan a skill", "audit a skill", "review skill security", "check skill for injection", "validate SKILL.md", or assess whether an agent skill is safe to install. Checks for prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks.

## The Catch

Audits a SKILL.md for injection and secrets before install. Scanning is not the same as running the skill.