skill-distribution-audit

80 / 100 · Low risk

Fine to try. Some of what it can do is expected: a security skill usually runs scanners and checks websites.

By github/awesome-copilot (GitHub) · security · 41,001 stars · scanned at commit 227949a

Audit a skill collection before release or investigate installer omissions, archived/template leakage, duplicate identities, and manifest drift. Reconcile the intended public source set, distribution manifest, and actual discovery output for a specified consumer version. Includes a deterministic set-comparison helper.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this. Expected for a security skill.

Found in 10 places.

skills/skill-distribution-audit/SKILL.md, line 36node <skill-directory>/scripts/compare-discovery.mjs <expected.json> <observed.json>
skills/skill-distribution-audit/SKILL.md, line 44node --test <skill-directory>/scripts/compare-discovery.test.mjs
skills/skill-distribution-audit/assets/copilot-validation/outputs/run-comparisons.mjs, line 3import { spawnSync } from "node:child_process";

Show 7 more

skills/skill-distribution-audit/assets/copilot-validation/outputs/run-comparisons.mjs, line 15const result = spawnSync(process.execPath, [helper, expected, observed], {
skills/skill-distribution-audit/assets/copilot-validation/reproduce.mjs, line 6import { execFileSync } from "node:child_process";
skills/skill-distribution-audit/assets/copilot-validation/reproduce.mjs, line 16execFileSync(process.execPath, [path.join(root, "outputs", script)], { cwd: root, stdio: "inherit", windowsHide: true });
skills/skill-distribution-audit/scripts/compare-discovery.test.mjs, line 7import { spawnSync } from "node:child_process";
skills/skill-distribution-audit/scripts/compare-discovery.test.mjs, line 61const run = (...args) => spawnSync(process.execPath, [script, ...args], { encoding: "utf8", windowsHide: true });
skills/skill-distribution-audit/scripts/compare-discovery.test.mjs, line 108const result = spawnSync(process.execPath, [script, expected, observed], { encoding: "utf8", windowsHide: true });
skills/skill-distribution-audit/scripts/compare-discovery.test.mjs, line 112assert.equal(spawnSync(process.execPath, [script, expected, path.join(root, "absent.json")], { windowsHide: true }).status, 2);

Downloads and installs other software

The author does not mention this.

Found in 1 place.

skills/skill-distribution-audit/assets/copilot-validation/inputs/before-discovery-stderr.txt, line 33…ex CLI (npx convex), TypeScript, React/Next.js, convex/react, @convex-dev/auth]

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'skill-distribution-audit' ] || [ -L ~/.agents/skills/'skill-distribution-audit' ]; then echo 'A skill folder named skill-distribution-audit already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/github/awesome-copilot' "$d" && git -C "$d" checkout --quiet '227949a7542a55d2155c00e7cdb998d9a0fee4f3' -- 'skills/skill-distribution-audit' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/skill-distribution-audit' ~/.agents/skills/'skill-distribution-audit' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'skill-distribution-audit' ~/.claude/skills/'skill-distribution-audit' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for github/awesome-copilot shows the score of its lowest-scoring skill.

SkillTrust badge for github/awesome-copilot

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/github/awesome-copilot.svg)](https://zalavijaysinh.github.io/skilltrust/repos/github/awesome-copilot/)

Score history

Date	Version	Score
2026-11-10	`227949a`	80