Launching today

skillaudit.sh

Launching today

Security audit for AI skill files in GitHub

2 followers

Security audit for AI skill files in GitHub

2 followers

Visit website

skillaudit.sh scans skill files (SKILL.md,cursorrules, AGENTS.md) in any GitHub repository. Paste a repo URL to get a report with findings, severity, and verdict. Helps developers and teams review AI configuration files before use.

Free

Launch tags:Artificial Intelligence•GitHub•Security

Launch Team / Built With

Unblocked AI Code Review — High-signal comments based on your team's context

High-signal comments based on your team's context

Promoted

CodeThreat

Maker

📌

We built skillaudit because AI skill files are powerful, they shape how Cursor, Windsurf, and other AI assistants behave in your projects, but they're also a new attack surface. A malicious SKILL.md can exfiltrate code, override safety constraints, or suggest dangerous commands. Most teams don't have tooling to audit these files before they run. skillaudit scans any public GitHub repo. No login. Paste the URL, get a verdict (Clean → Dangerous), severity breakdown, and actionable findings. We check for prompt injection, data exfiltration, privilege escalation, supply-chain risks (npm/PyPI), and obfuscation. Optional LLM verification reduces false positives. Try it: skillaudit.sh — paste a repo and see the report in seconds.

Report

1d ago