Skill Security Auditor

Example Use Cases

• 1

  Automatically detect security risks in Claude Skills and MCP server code.

• 2

  Perform manual security checklists alongside automated tests.

• 3

  Analyze GitHub repositories for source trust and maintenance signals.

Description

Skill Security Auditor provides comprehensive security analysis for Claude Skills and MCP servers by detecting dangerous commands, prompt injections, supply chain attacks, and MCP-specific vulnerabilities. It includes automated scripts, manual checklists, and Docker sandbox environments to facilitate thorough security assessments. The tool also integrates GitHub repository analysis to evaluate source trustworthiness and offers risk scoring to guide usage decisions.