.pre-commit-hooks.yaml
CHANGELOG.md
CODE_OF_CONDUCT.md
CONTRIBUTING.md
LICENSE
MANIFEST.in
README.md
README.zh-CN.md
RELEASE_CHECKLIST.md
SECURITY.md
SKILL.md
SUPPORT.md
action.yml
install.ps1
install.sh
pyproject.toml
skill-auditor-payload.json
.github/CODEOWNERS
.github/PULL_REQUEST_TEMPLATE.md
.github/dependabot.yml
.github/skill-auditor-dogfood.yml
.github/ISSUE_TEMPLATE/bug_report.yml
.github/ISSUE_TEMPLATE/config.yml
.github/ISSUE_TEMPLATE/false_positive.yml
.github/ISSUE_TEMPLATE/feature_request.yml
.github/ISSUE_TEMPLATE/missed_detection.yml
.github/ISSUE_TEMPLATE/new_rule.yml
.github/ISSUE_TEMPLATE/suspicious_skill.yml
.github/workflows/corpus-research.yml
.github/workflows/python-checks.yml
.github/workflows/release.yml
.github/workflows/skill-auditor.yml
agents/openai.yaml
docs/OPEN_SOURCE_ADOPTION.md
docs/README.md
docs/ci-ecosystem.md
docs/ci-ecosystem.zh-CN.md
docs/record-demo.sh
docs/research-methodology.md
docs/research-report-template.md
examples/README.md
examples/ci/README.md
examples/clean-skill/SKILL.md
examples/clean-skill/scripts/convert.py
examples/cli/README.md
examples/github-actions/README.md
examples/github-actions/skill-auditor.yml
examples/malicious-skill/README.md
examples/malicious-skill/SKILL.md
examples/malicious-skill/scripts/setup.sh
examples/pre-commit/.pre-commit-config.yaml
examples/pre-commit/README.md
references/audit-report.md
references/risk-patterns.md
rules/archives.yaml
rules/credentials.yaml
rules/dangerous-shell.yaml
rules/description-mismatch.yaml
rules/dynamic-execution.yaml
rules/exfiltration.yaml
rules/filesystem-boundary.yaml
rules/git-hooks.yaml
rules/language-exfiltration.yaml
rules/logic-bomb.yaml
rules/mcp-config.yaml
rules/obfuscation.yaml
rules/powershell.yaml
rules/prompt-injection.yaml
rules/vscode.yaml
schemas/skill-auditor-report-v1.schema.json
scripts/config.py
scripts/formats.py
scripts/paths.py
scripts/render_catalog.py
scripts/research_corpus.py
scripts/rules_loader.py
scripts/run_tests.py
scripts/scan.py
scripts/skill_auditor.py
src/skill_auditor/__init__.py
src/skill_auditor/__main__.py
src/skill_auditor/action_runner.py
src/skill_auditor/analyzers.py
src/skill_auditor/archives.py
src/skill_auditor/baseline.py
src/skill_auditor/cache.py
src/skill_auditor/cli.py
src/skill_auditor/config.py
src/skill_auditor/errors.py
src/skill_auditor/formats.py
src/skill_auditor/identity.py
src/skill_auditor/installer.py
src/skill_auditor/integrity.py
src/skill_auditor/manifest.py
src/skill_auditor/models.py
src/skill_auditor/paths.py
src/skill_auditor/render_catalog.py
src/skill_auditor/report_builder.py
src/skill_auditor/rules_loader.py
src/skill_auditor/sanitize.py
src/skill_auditor/scanner.py
src/skill_auditor/semantic.py
src/skill_auditor/target.py
src/skill_auditor.egg-info/PKG-INFO
src/skill_auditor.egg-info/SOURCES.txt
src/skill_auditor.egg-info/dependency_links.txt
src/skill_auditor.egg-info/entry_points.txt
src/skill_auditor.egg-info/requires.txt
src/skill_auditor.egg-info/top_level.txt
src/skill_auditor/rules/archives.yaml
src/skill_auditor/rules/credentials.yaml
src/skill_auditor/rules/dangerous-shell.yaml
src/skill_auditor/rules/description-mismatch.yaml
src/skill_auditor/rules/dynamic-execution.yaml
src/skill_auditor/rules/exfiltration.yaml
src/skill_auditor/rules/filesystem-boundary.yaml
src/skill_auditor/rules/git-hooks.yaml
src/skill_auditor/rules/language-exfiltration.yaml
src/skill_auditor/rules/logic-bomb.yaml
src/skill_auditor/rules/mcp-config.yaml
src/skill_auditor/rules/obfuscation.yaml
src/skill_auditor/rules/powershell.yaml
src/skill_auditor/rules/prompt-injection.yaml
src/skill_auditor/rules/vscode.yaml
src/skill_auditor/schemas/skill-auditor-report-v1.schema.json
tests/cases.py
tests/security_cases.py
tests/test_action.py
tests/test_analyzers.py
tests/test_architecture.py
tests/test_archives.py
tests/test_boundaries.py
tests/test_cli.py
tests/test_ecosystem.py
tests/test_formats.py
tests/test_install.py
tests/test_legacy_scripts.py
tests/test_manifest_security.py
tests/test_policy_fail_closed.py
tests/test_report_schema.py
tests/test_research.py
tests/test_rules_loader.py
tests/test_semantic.py
tests/fixtures/rules/manifest.json
tests/fixtures/rules/DYNAMIC-PY-002/negative/run.py
tests/fixtures/rules/DYNAMIC-PY-002/positive/run.py
tests/fixtures/rules/MCP-002/negative/read.py
tests/fixtures/rules/MCP-002/positive/write.py
tests/fixtures/rules/NODEEXFIL-001/negative/fetch.js
tests/fixtures/rules/NODEEXFIL-001/positive/send.js
tests/fixtures/rules/OBFUS-007/negative/AGENTS.md
tests/fixtures/rules/OBFUS-007/positive/AGENTS.md
tests/fixtures/rules/PS-004/negative/download.ps1
tests/fixtures/rules/PS-004/positive/payload.ps1
tests/fixtures/rules/PYEXFIL-001/negative/fetch.py
tests/fixtures/rules/PYEXFIL-001/positive/send.py
tests/fixtures/rules/VSCODE-002/negative/setup.sh
tests/fixtures/rules/VSCODE-002/positive/setup.sh