Read-only safety inspection of a third-party agent skill or plugin BEFORE it is installed or trusted. Reads every file in the candidate directory (SKILL.md plus auxiliary and test files, not just the body), compares declared behavior against what the files actually do, scans for exfiltration, secret access, config or agent-instruction modification, shell execution, and hidden Unicode, and returns an install/decline/sandbox verdict for a human to approve. Never installs, never auto-trusts. Use when evaluating an external skill, plugin, or marketplace entry before adopting it. Do not use to author or audit a first-party Fhorja skill (those are generated by build-agent-skills.sh), to review product code (use review-hard or security-review), or to fetch a remote skill from the web (record its origin via capture-references, then obtain a local copy out of band into a quarantine directory first).
Install with
Claude CodeCodexCursorGitHub CopilotGemini CLI
Supported by the Atlas install prompt. Skill-specific requirements vary.
Skill stats
Skills1CategorySecurityStars0
About this skill
Read-only safety inspection of a third-party agent skill or plugin BEFORE it is installed or trusted. Reads every file in the candidate directory (SKILL.md plus auxiliary and test files, not just the body), compares declared behavior against what the files actually do, scans for exfiltration, secret access, config or agent-instruction modification, shell execution, and hidden Unicode, and returns an install/decline/sandbox verdict for a human to approve. Never installs, never auto-trusts. Use when evaluating an external skill, plugin, or marketplace entry before adopting it. Do not use to author or audit a first-party Fhorja skill (those are generated by build-agent-skills.sh), to review product code (use review-hard or security-review), or to fetch a remote skill from the web (record its origin via capture-references, then obtain a local copy out of band into a quarantine directory first).
Quick start
Copy the install prompt. Use the green button above this README.
Send it to your agent. Paste it into your coding agent’s chat and send.
Review the setup. Your agent checks the skill’s instructions, requirements, and installation scope.
Read-only safety inspection of a third-party agent skill or plugin BEFORE it is installed or trusted. Reads every file in the candidate directory (SKILL.md plus auxiliary and test files, not just the body), compares declared behavior against what the files actually do, scans for exfiltration, secret access, config or agent-instruction modification, shell execution, and hidden Unicode, and returns an install/decline/sandbox verdict for a human to approve. Never installs, never auto-trusts. Use when evaluating an external skill, plugin, or marketplace entry before adopting it. Do not use to author or audit a first-party Fhorja skill (those are generated by build-agent-skills.sh), to review product code (use review-hard or security-review), or to fetch a remote skill from the web (record its origin via capture-references, then obtain a local copy out of band into a quarantine directory first).
About this listing
Category
Security
Reported license
MIT
Listing language (estimated)
English
Review status
Not individually reviewed
Agent compatibility
Atlas installation supports Claude Code, Codex, and Cursor. Skill-specific dependencies and features are checked during setup.
Claude Code
Codex
Cursor
GitHub Copilot
Gemini CLI