/trust-issues
Adversarial, attacker-minded security review of ANY untrusted code before you trust it — a GitHub repo, a Claude/agent skill, an MCP server, a plugin, an npm or pip package, or a snippet you are about to base your own skill on. ALWAYS run this BEFORE installing a skill or
shell
$ npx -y skills add howshannon/trust-issues --skill trust-issues --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/trust-issues
Context preview
The summary Claude sees to decide when to auto-load this skill.
Adversarial, attacker-minded security review of ANY untrusted code before you trust it — a GitHub repo, a Claude/agent skill, an MCP server, a plugin, an npm or pip package, or a snippet you are about to base your own skill on. ALWAYS run this BEFORE installing a skill or
Ships withtrust-issues
Adversarial security review for AI skills, repos, MCP servers, and packages before you install them. A read-only scanner plus a five-persona reasoning pass, ending in a GO / GO WITH MITIGATIONS / NO-GO verdict.
Get the whole plugin, auto-invoked