skill-security-auditor
Audit an AI agent skill before installing it.
Skill by Dr. Antoine Louis
Chalk Labs
Need help deploying skill-security-auditor?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/lawve-ai-skill-security-auditor
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: security, agent-building
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
- Runs as
- Python package
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/skill-security-auditor
What's inside
- Skill name
skill-security-auditor- Description
- Audit an AI agent skill before installing it. Use proactively whenever the user is about to add, install, enable, or evaluate an unfamiliar skill — including phrases like "audit this skill", "is this skill safe", "scan skill before install", "check skill for malicious code", "review this plugin", or any pre-install gate on an untrusted, third-party, or community-distributed skill bundle. Runs ten categories of static checks (code execution, network exfiltration, credential harvesting, persistence, prompt injection, supply-chain hooks, obfuscation, destructive filesystem ops, secrets, Trojan Source / homoglyphs) and emits a PASS / WARN / FAIL verdict.
- License
- NOASSERTION
- Metadata
- author: Dr. Antoine Louis · license: agpl-3.0 · version: 2026-05-12
- Instructions
- 256 lines in SKILL.md · view on GitHub
Before installing
- Ships executable scripts
- Instructions call the network
- Instructions read files in your home folder (~/.ssh, ~/.aws…)
Agent Skills spec issues
- name: "skill-security-auditor" does not match folder "skill-security-auditor-lawve"
Files (12)
- LICENSE.txt
- README.md
- SKILL.md
- baseline.example.yml · assets/
- pattern-catalog.md · references/
- remediation-guide.md · references/
- threat-model.md · references/
- audit.py · scripts/
- core.py · scripts/
- patterns.py · scripts/
- reporter.py · scripts/
- scanners.py · scripts/
The license isn't open source, so the instructions aren't shown here. Read SKILL.md on GitHub
More from lawve-ai/awesome-legal-skills
- 0.817score
uk-citation-verification-matei-clej
Matei Clej
Verifies UK case-law citations, pinpoint references and quotations against the official public register — The National Archives' Find Case Law — and statutory…
SkillAFreshness: A★ 895Claude Code +9 - 0.817score
extradition-case-law-search-matei-clej
Matei Clej
Searches the domestic courts of 122 jurisdictions — 153 databases, 49 automated — for extradition and arrest-warrant surrender decisions, each in its own…
SkillAFreshness: A★ 895Claude Code +9 - 0.813score
regulatory-threat-model
Ansvar Systems AB
Use when an application or system — including one built quickly with AI coding agents — needs a security review with regulatory grounding: a STRIDE threat…
SkillAFreshness: A★ 895Claude Code +9 - 0.813score
incident-reporting-navigator
Ansvar Systems AB
Use when a security incident, data breach, or actively exploited vulnerability raises the question "who must we notify, where, and by when?" Screens one…
SkillAFreshness: A★ 895Claude Code +9 - 0.813score
cra-vulnerability-obligations
Ansvar Systems AB
Use when a user asks what the EU Cyber Resilience Act (CRA) means for their product, whether and when they must report a vulnerability or incident, or what a…
SkillAFreshness: A★ 895Claude Code +9 - 0.813score
scotus-argument-analyzer
Seth J. Chandler
Analyze a U.S.
SkillAFreshness: A★ 895Claude Code +9 - 0.807score
jev-question-translator
Seth J. Chandler
Turns a legal question, a set of draft questions, or source material such as a statute, jury instruction, rubric, contract checklist, or coding manual into a…
SkillAFreshness: A★ 895Claude Code +9 - 0.807score
reader-first-technical-edit
Seth J. Chandler
Edit mathematically, empirically, or technically dense papers for readers outside the author’s specialty, including empirical legal scholarship…
SkillAFreshness: A★ 895Claude Code +9 - 0.777score
privacy-policy-stephane-boghossian
Stephane Boghossian
A zero-hallucination privacy-policy generator that takes anyone — non-lawyer founder to lawyer — from a guided intake to a publishable, jurisdiction-aware…
SkillBFreshness: B★ 895Claude Code +9 - 0.772score
client-instruction-schedule
Serhan Handani
Build a client instruction schedule — a plain-English, Scott Schedule-style Word table that gathers a struggling client's evidence and instructions issue by…
SkillBFreshness: B★ 895Claude Code +9 - 0.771score
eu-data-act-oliver-schmidt-prietz
Oliver Schmidt-Prietz
Practitioner skill for advising on EU Regulation 2023/2854 (Data Act).
SkillBFreshness: B★ 895Claude Code +9 - 0.771score
cross-regulatory-impact-analyzer-patrick-munro
Patrick Munro
Analyzes how multiple regulations interact for a specific product, service, or business model.
SkillBFreshness: B★ 895Claude Code +9
Signals
- Stars
- 895
- Forks
- 119
- Open issues
- 7
- Last commit (this folder)
- Jul 30, 2026 (3 months ago)
From GitHub (fetched Oct 24, 2026).
Details
- Version
- 2026-05-12
- License
- NOASSERTION
- Repository
- github.com/lawve-ai/awesome-legal-skills
- Website
- lawve.ai
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from Dr. Antoine Louis
- 0.761score
tabular-review-lawvable
Dr. Antoine Louis
Guide to analyze multiple documents (PDF, DOCX) against user-defined columns and produce a structured Excel output with citations.
SkillBFreshness: B★ 895Claude Code +9 - 0.758score
Word Editor
Dr. Antoine Louis
Edit, query, and transform Word documents (.docx) with the SuperDoc CLI.
SkillBFreshness: B★ 895Claude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get skill-security-auditor running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
skill-security-auditor. Agent Mart. https://agentmart.dev/skills/lawve-ai-skill-security-auditor (last updated 2026-10-24)