AI Blocks › Keep your code secure
Skill safety auditor
Give it a skill before you install it. Get risky code and hidden commands flagged.
Skill safety auditor is a free AI skill for the job "Keep your code secure". Give the instructions to an AI assistant that supports the required files and tools, then review its output.
Free · No account · MIT licence · Made by Alireza Rezvani
Made by Alireza Rezvani. See the original on GitHub; we copied it as it is, with its licence.
What it does
A PASS, WARN or FAIL verdict on a skill before you install it, with the risky code and hidden commands flagged. You avoid giving a stranger's script access to your machine. Point it at a local folder or a git repo. A Python script scans code files for command injection, code execution, hidden or encoded payloads, network sends and attempts to read keys or credentials. Each finding has a severity and a note on how to fix it. A strict mode turns every warning into a fail, and you can ask for a JSON report. It reads the files and does not run them.
You give it
- A skill folder or git repo link
- Python 3
- Strict mode choice (optional)
You get
- A PASS, WARN or FAIL verdict
- Findings by severity
- Fix advice
- A JSON report if requested
Use it when
- You found a skill on GitHub and want to check it before installing.
- Your team accepts skills from outside and needs a gate.
- A skill asks for scripts and you are unsure what they do.
- You want a report you can attach to an approval.
How to use it
- Add it to your AI once: download it and add the folder to Claude, ChatGPT or Codex as a skill.
- Ask for the job in your own words. Your AI opens the skill when it fits.
- It works best when your AI can run code and read files.