# Skill Audit Guardian

> Audit dropped ClawHub skill ZIPs, classify risk (SAFE/CAUTION/REMOVE), auto-sort files, and generate a plain-English security dashboard.

- Skill: `modbender/skill-audit-guardian` (Agent Skill, multi-file: 5 files)
- Install (CLI): `npx skillmds@latest add modbender/skill-audit-guardian`
- Raw SKILL.md: https://api.skillmd.com/api/skills/modbender/skill-audit-guardian/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: modbender (https://skillmd.com/u/modbender)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/modbender/skill-audit-guardian

---


# Skill Audit Guardian

Security helper for reviewing skill ZIPs before production install.

## What it does

1. Watches a drop folder for `.zip` files
2. Audits each ZIP for suspicious patterns
3. Scores and classifies into:
   - SAFE
   - CAUTION
   - REMOVE
4. Auto-moves files into risk folders
5. Generates a dashboard with plain-English reasoning per flagged line

## Included scripts

- `scripts/skill-zip-audit.sh`
  - One-shot ZIP auditor
- `scripts/skill-zip-watch.sh`
  - Continuous watcher + auto-sorter
- `scripts/generate-skill-audit-pro.py`
  - Dashboard generator (`~/Desktop/skill-audit-pro.html`)

## Quick start

```bash
# One-shot audit
bash scripts/skill-zip-audit.sh ~/Desktop/skill-drop/example.zip

# Continuous mode (recommended)
bash scripts/skill-zip-watch.sh ~/Desktop/skill-drop
```

## Folder output (watch mode)

- `~/Desktop/skill-drop/safe`
- `~/Desktop/skill-drop/caution`
- `~/Desktop/skill-drop/remove`
- `~/Desktop/skill-drop/failed`

## Dashboard

```bash
open ~/Desktop/skill-audit-pro.html
```

## Notes

- This is heuristic scanning, not a full malware sandbox.
- Always test CAUTION/REMOVE skills in isolated environment first.