mt_skill_audit
Audit AI agent skills by analyzing SKILL.md files for prompt injection, data exfiltration, and scope violations. Computes SHA-256 hashes and delivers scored security assessments to verify code integrity.
Instructions
Audit an AI agent skill (SKILL.md) for security risks.
Fetches the SKILL.md from a URL, computes its canonical SHA-256 hash, and runs an 8-point security audit checking for prompt injection, data exfiltration, tool scope violations, and metadata completeness. Score starts at 100 with deductions per finding. Passing score: >= 70.
Args: github_url: URL to the skill (GitHub repo or direct HTTPS link to SKILL.md)
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| github_url | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |