Skill UI

This comprehensive, zero-trust security auditor scans third-party AI agent skills before installation. It performs a rigorous 6-phase review process, analyzing surface patterns, script integrity, permissions, and supply chain risks. It is designed to detect malicious payloads, credential theft, instruction overrides, and prompt injection attacks, ensuring secure AI development and deployment.

This tool simulates a 'risk-paranoid' interrogation, forcing comprehensive security and compliance checks before deploying any system that handles sensitive data (PII, PHI, cardholder data). It covers six critical areas: Threat Modeling (STRIDE), Blast Radius quantification, Detection capabilities (MTTD), Incident Response readiness, Regulatory compliance windows (GDPR, HIPAA), and Third-party vendor security posture. Use this gate check before major architectural changes or production releases.