⚠️Install with caution. This skill has very few installs. Always review the source and verify it on clawhub.ai before installing. Community-built skills run with agent permissions — only install ones you trust.

🤖 Coding Agents & IDEs

A security auditing tool for third-party Claude Code Skills. Automatically pre-checks any Skill before execution to block dangerous ones, and supports manual deep audits.v1.0.0

Name: A security auditing tool for third-party Claude Code Skills. Automatically pre-checks any Skill before execution to block dangerous ones, and supports manual deep audits.
Author: hezhijie

skills-security-check

hezhijie

Scan a third-party Claude Code skill for security risks before enabling it. Use when user wants to audit, check, or verify the safety of a skill.

latest

Download Package View on ClawHub

Install & Quick Start

Install via ClawdBot CLI:

clawdbot install hezhijie/skills-security-check

Skill Package7 files

📋SKILL.mdmarkdown

Failed to load file.

Quality Score

A70/100

Grade Good — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.

Market Validation9/35

· 543 downloads (moderate demand)
· 2 installs (very low)

Documentation25/25

· SKILL.md present
· Detailed documentation (≥3000 chars)
· Contains tool definitions
· Contains usage examples or trigger description
· Detailed summary

Package Completeness11/15

Security Analysis

💙 Low Risk

UNSAFE_SHELLmedium

Potentially destructive shell commands in tool definitions

rm -rf ~

Audited Apr 16, 2026 · audit v1.0

💡

Usage Guide

Generated Apr 5, 2026

AI developersEnterprise security teamsOpen-source maintainersintermediate

💡 Application Scenarios

Enterprise AI Platform IntegrationTechnology & Software

Large companies deploying custom Claude Code skills across teams can use this tool to automatically vet third-party skills before they are added to the platform, ensuring compliance with internal security policies and preventing unauthorized system access.

Freelance Developer Safety CheckFreelance & Consulting

Independent developers building Claude skills for clients can audit downloaded or shared skill packages to verify they contain no hidden malicious code, protecting their own systems and maintaining professional trust.

Educational AI Lab SecurityEducation

Universities or coding bootcamps teaching AI skill development can integrate this tool into their curriculum to help students analyze and understand security risks in code, promoting safe coding practices in hands-on labs.

Open-Source Skill Repository MaintenanceOpen-Source Software

Maintainers of public repositories for Claude skills can run this audit on contributed submissions to automatically flag high-risk elements like unauthorized network calls or file modifications before merging, ensuring community safety.

Compliance Auditing for Regulated IndustriesFinance & Healthcare

Organizations in finance or healthcare using AI skills must adhere to strict data protection regulations; this tool helps audit skills for risks like sensitive data access or exfiltration, supporting compliance documentation and risk assessments.

💼 Business Models

SaaS Security PlatformSubscription fees from $50-$500/month

Offer this auditing tool as a cloud-based service where users upload skill directories for automated scans, with tiered pricing based on scan frequency and detailed reporting features, targeting enterprises and developers.

Integration with AI Development ToolsLicensing fees and revenue-sharing agreements

License the tool to AI development platforms or IDEs that support Claude skills, embedding it as a built-in security check feature to enhance their value proposition and attract security-conscious users.

Consulting and Custom AuditsProject-based fees from $1,000-$10,000 per audit

Provide professional services where experts use this tool to conduct in-depth security audits for clients, offering tailored reports, remediation advice, and ongoing monitoring for high-stakes deployments.

💬 Integration Tip

Integrate this tool into CI/CD pipelines to automatically scan skills during deployment, and ensure it runs in isolated environments to prevent any accidental execution of audited code.