Skill Inspector -- Quality Auditor

Before you install any third-party skill, you need to know it's safe — and you can't just run it to find out.

Skill Inspector statically analyzes every markdown file and shell script for prompt injections, identity override attacks, credential harvesting, kill switch tampering, and malicious patterns. No external calls. No code execution. Fully offline.

What You Get:

• Prompt Injection Detection -- identifies authority claims, instruction overrides, and conditional hidden triggers
• Identity Attack Detection -- flags attempts to redefine agent name, values, or persona
• Credential Harvesting Detection -- catches attempts to log or transmit API keys and tokens
• Malware Pattern Matching -- detects reverse shells, crypto miners, privilege escalation, and persistence mechanisms
• Severity Classification -- CRITICAL, HIGH, MEDIUM, LOW with specific evidence per finding

Produces a clear PASS, WARNING, or BLOCKED verdict.

Essential security baseline for anyone installing third-party skills.