--- name: audit-skills-0bcc59a2bf0b description: "Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads across Windows, macOS, Linux/Unix, and Mobile (Android/iOS)." category: security risk: safe source: community date_added: "2026-03-07" author: MAIOStudio tags: [security, audit, skills, bundles, cross-platform] tools: [claude, gemini, gpt, llama, mistral, etc] --- # Audit Skills (Premium Universal Security) ## Overview Expert security auditor for AI Skills and Bundles. Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads across Windows, macOS, Linux/Unix, and Mobile (Android/iOS). 2-4 sentences is perfect. ## When to Use This Skill - Use when you need to audit AI skills and bundles for security vulnerabilities - Use when working with cross-platform security analysis - Use when the user asks about verifying skill legitimacy or performing security reviews - Use when scanning for mobile threats in AI skills ## How It Works ### Step 1: Static Analysis Performs non-intrusive static analysis to identify malicious patterns, data leaks, system stability risks, and obfuscated payloads. ### Step 2: Platform-Specific Threat Detection Analyzes code for platform-specific security issues across Windows, macOS, Linux/Unix, and Mobile (Android/iOS). #### 1. Privilege, Ownership & Metadata Manipulation - **Elevated Access**: `sudo`, `chown`, `chmod`, `TakeOwnership`, `icacls`, `Set-ExecutionPolicy`. - **Metadata Tampering**: `touch -t`, `setfile` (macOS), `attrib` (Windows), `Set-ItemProperty`, `chflags`. - **Risk**: Unauthorized access, masking activity, or making files immutable. #### 2. File/Folder Locking & Resource Denial - **Patterns**: `chmod 000`, `chattr +i` (immutable), `attrib +r +s +h`, `Deny` ACEs in `icacls`. - **Global Actions**: Locking or hiding folders in `%USERPROFILE%`, `/Users/`, or `/etc/`. - **Risk**: Denial of service or data locking. #### 3. Script Execution & Batch Invocation - **Legacy/Batch Windows**: `.bat`, `.cmd`, `cmd.exe /c`, `vbs`, `cscript`, `wscript`. - **Unix Shell**: `.sh`, `.bash`, `.zsh`, `chmod +x` followed by execution. - **PowerShell**: `.ps1`, `powershell -ExecutionPolicy Bypass -File ...`. - **Hidden Flags**: `-WindowStyle Hidden`, `-w hidden`, `-noprofile`. #### 4. Dangerous Install/Uninstall & System Changes - **Windows**: `msiexec /qn`, `choco uninstall`, `reg delete`. - **Linux/Unix**: `apt-get purge`, `yum remove`, `rm -rf /usr/bin/...`. - **macOS**: `brew uninstall`, deleting from `/Applications`. - **Risk**: Removing security software or creating unmonitored installation paths. #### 5. Mobile Application & OS Security (Android/iOS) - **Android Tools**: `adb shell`, `pm install`, `am start`, `apktool`, `dex2jar`, `keytool`. - **Android Files**: Manipulation of `AndroidManifest.xml` (permissions), `classes.dex`, or `strings.xml`. - **iOS Tools**: `xcodebuild`, `codesign`, `security find-identity`, `fastlane`, `xcrun`. - **iOS Files**: Manipulation of `Info.plist`, `Entitlements.plist`, or `Provisioning Profiles`. - **Mobile Patterns**: Jailbreak/Root detection bypasses, hardcoded API keys in mobile source, or sensitive permission requests (Camera, GPS, Contacts) in non-mobile skills. - **Risk**: Malicious mobile package injection, credential theft from mobile builds, or device manipulation via ADB. #### 6. Information Disclosure & Network Exfiltration - **Patterns**: `curl`, `wget`, `Invoke-WebRequest`, `Invoke-RestMethod`, `scp`, `ftp`, `nc`, `socat`. - **Sensible Data**: `.env`, `.ssh`, `cookies.sqlite`, `Keychains` (macOS), `Credentials` (Windows), `keystore` (Android). - **Intranet**: Scanning internal IPs or mapping local services. #### 7. Service, Process & Stability Manipulation - **Windows**: `Stop-Service`, `taskkill /f`, `sc.exe delete`. - **Unix/Mac**: `kill -9`, `pkill`, `systemctl disable/stop`, `launchctl unload`. - **Low-level**: Direct disk access (`dd`), firmware/BIOS calls, kernel module management. #### 8. Obfuscation & Persistence - **Encoding**: `Base64`, `Hex`, `XOR` loops, `atob()`. - **Persistence**: `reg add` (Run keys), `schtasks`, `crontab`, `launchctl` (macOS), `systemd` units. - **Tubes**: `curl ... | bash`, `iwr ... | iex`. #### 9. Legitimacy & Scope (Universal) - **Registry Alignment**: Cross-reference with `CATALOG.md`. - **Structural Integrity**: Does it follow the standard repo layout? - **Healthy Scope**: Does a "UI Design" skill need `adb shell` or `sudo`? ### Step 3: Reporting Generates a security report with a score (0-10), platform target identification, flagged actions, threat analysis, and mitigation recommendations. ## Examples ### Example 1: Security Review ```markdown "Perform a security audit on this skill bundle" ``` ### Example 2: Cross-Platform Threat Analysis ```markdown "Scan for mobile threats in this AI skill" ``` ## Best Practices - ✅ Perform non-intrusive analysis - ✅ Check for privilege escalation patterns - ✅ Look for information disclosure vulnerabilities - ✅ Analyze cross-platform threats - ❌ Don't execute potentially malicious code during audit - ❌ Don't modify the code being audited - ❌ Don't ignore mobile-specific security concerns ## Common Pitfalls - **Problem:** Executing code during audit **Solution:** Stick to static analysis methods only - **Problem:** Missing cross-platform threats **Solution:** Check for platform-specific security issues on all supported platforms - **Problem:** Failing to detect obfuscated payloads **Solution:** Look for encoding patterns like Base64, Hex, XOR loops, and atob() ## Related Skills - `@security-scanner` - Additional security scanning capabilities ## Limitations - Use this skill only when the task clearly matches the scope described above. - Do not treat the output as a substitute for environment-specific validation, testing, or expert review. - Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing. --- Source attribution: ASoudy Original project: https://github.com/ASoudy/AGS/blob/cd1d94757d590093507ef8ac26299eab8bc20478/AGAS/skills/audit-skills/SKILL.md License: MIT License information: https://opensource.org/license/mit Original upstream instructions; downloaded from Mega AI Hub. ## Upstream license notice MIT License Copyright (c) 2026 Antigravity User Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. # Mega AI Hub resource metadata Creator / publisher: ASoudy Original project: https://github.com/ASoudy/AGS/blob/cd1d94757d590093507ef8ac26299eab8bc20478/AGAS/skills/audit-skills/SKILL.md Attribution basis: Source repository record Fields of work: Development & Engineering Roles: DevOps / SRE, QA / Test Engineer, Security Engineer Specialties: Cross Platform Tools: Claude, Gemini, Gpt, Llama, Mistral Country applicability: Country not specified Classification basis: Source catalog labels Instruction SHA-256: 2d9b07f2e3d96c032ba5e0ed43ee609c7893363a5161e0bb76c685d2f2b569e1