Skill Scanner · kriszi-soon bundle Security auditor for Claude Code skills, plugins, and SKILL.md files. Scans any skill file, skill link, or pasted skill content for malicious code, prompt injection attacks, data exfiltration attempts, dangerous shell commands, hidden Unicode tricks, and social engineering patterns that could harm your system or compromise Claude's behavior. TRIGGER when user says "scan this skill", "check this file for malicious code", "is this skill safe", "audit this plugin", "check for prompt injection", "verify this before I install it", pastes a GitHub link to a skill, or shares any .skill / SKILL.md / plugin content and wants a safety check before installing it.
