Audit an Agent Skill (Claude Code / Cowork skill) for malicious code, data exfiltration, prompt-injection instructions, dangerous shell commands, obfuscation, over-broad permissions, and supply-chain risk BEFORE installing or trusting it.