skill-defender
This skill is an offline, deterministic scanner that inspects installed skills for prompt injection, credential theft, exfiltration, obfuscation, and backdoors. It launches subprocesses via `subprocess.run` to execute `python3 scan_skill.py` on skill directories; this execution is purpose-aligned and is the only security-relevant behavior detected.