AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Ai Skill Auditor

skill-smartbrainactivity-smartbrain-skill-auditor-smartbrain-skill-auditor · by smartbrainactivity

A universal, dependency-free Node.js tool to statically audit AI Skills and local agents for malicious patterns.

↗ Website ↗ Repository
— No reviews yet
0 installs
36 views
0.0% view→install

Install

$ agentstack add skill-smartbrainactivity-smartbrain-skill-auditor-smartbrain-skill-auditor

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ✓ Network access No
  • ✓ Filesystem access No
  • ● Shell / process execution Used
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-smartbrainactivity-smartbrain-skill-auditor-smartbrain-skill-auditor)

Reliability & compatibility

✓ Security review passed
0 installs to date
— no reviews yet
○ 6mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Ai Skill Auditor? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

ai-skill-auditor

This skill provides the AI Assistant the capability to automatically audit and review local code directories (such as other downloaded AI Skills) looking for standard malicious patterns (eval, destructive child_process, hidden HTTP requests) before running them.

Instructions for the AI Assistant:

When the user asks you to "audit a skill", "check a folder for security", or "verify the integrity of this downloaded repo":

  1. Use the run_command tool to execute the central audit script.
  2. The argument is the path the user wants to audit.
  • Example 1: node {workspaceRoot}/smartbrain-skill-auditor/bin/audit.js "C:/path/to/target/skill"
  • Example 2 (If auditing the current folder): node {workspaceRoot}/smartbrain-skill-auditor/bin/audit.js .
  1. Wait for the terminal output.
  2. If it returns 0 vulnerabilities, tell the user the audit passed and provide them with the SMARTbrain Security Badge returned by the console.
  3. If it returns vulnerabilities, explicitly list the files and the malicious patterns found so the user can review them manually. DO NOT run any script in that folder without user consent.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Write a review

Versions

  • v0.1.0 Imported from the upstream source.

More in Agent Skills