agentleFS
gujun1502gujun1502/arch-skills/skills/skill-safety-audit/SKILL.md

skill-safety-audit

Skill1 starsChanged 2 months agoLicence not identifiedView on GitHub

Skill 安全审计器。在安装任何 Claude Code / Codex / Cursor skill 之前,扫描其 SKILL.md 与脚本: 密钥与明文口令、邮箱 / 手机 / 证件号、联网请求、写 / 删文件、执行命令、外发 / 下单 / 推送、 调用外部模型平台、提示注入与"对用户隐瞒"指令;推断安全等级 L1–L4;生成把敏感内容替换成占位符的脱敏版。 当用户说"审计这个 skill / 这个技能安全吗 / 装之前检查一下 / 帮我脱敏 / 把项目名去掉再开源", 或准备把一个 skill 文件夹开源、分享、提交到注册表时使用。 Skill safety auditor: scan a skill folder for secrets, personal data, network / filesystem / execution behaviour and prompt injection, infer an L1–L4 safety level, and produce a redacted copy. Use before installing, sharing or open-sourcing any skill.

  • Deletes or force-pushes

3 other projects use a version of this.

Adopted by

Most recently taken up by

The file

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

No reviews yet

People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.

  • It worked
  • Partly
  • It didn't
What did you use it for? e.g. Reviewing pull requests in a Rails app

Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.