# Skill Risk Check (ChatGPT Plugin)

> Scan before you install.

- Type: plugin
- Publisher: Orbral
- Categories: Security
- Website: https://chatgpt.com/plugins/plugins_6a8d0cf2365881919812f4c32c7648e6
- Open in ChatGPT: https://chatgpt.com/plugins/plugins_6a8d0cf2365881919812f4c32c7648e6
- Version: 0.1.5
- Listed: 2026-10-15

## About

Use this before installing an agent skill or plugin. Skill Risk Check scans local files for hidden instructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret exposure, then returns ranked findings with file-and-line evidence and remediation. Do not use it as a safety certification; it never runs, installs, enables, or uploads the target.

## Install

1. **Add it in ChatGPT** Open Plugins in the ChatGPT sidebar (web or desktop), search for “Skill Risk Check” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.

## Skills

- **agent-skillguard**: Use before installing an agent skill or plugin. Scan local files for risky instructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret exposure; return file-and-line findings and remediation without running, uploading, or certifying the target.

## Example prompts

- "I found a viral skill repo on Twitter. Before I install it, audit the public repo and flag anything unsafe."
- "Audit this plugin's scripts, permissions, and external calls. Rank risks with file-and-line evidence."
- "Give me a go-or-no-go. List what blocks installation, what must be fixed, and what I still need to review."

## Related

- [Codex Security](https://chatgptplugins.directory/plugins/codex-security.md): Security scanning for your codebase
- [Static Analysis (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-static-analysis.md): CodeQL, Semgrep and SARIF parsing skills for security bug hunting
- [Differential Review (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-differential-review.md): Security-focused review of code diffs with blast-radius estimation
- [Supply Chain Risk Auditor (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-supply-chain-risk-auditor.md): Audit npm, PyPI and Go dependencies for supply-chain risk
- [Aivana Security Investigator](https://chatgptplugins.directory/plugins/aivana-security-investigator.md): Run safe KQL investigations
- [Atbash Safety](https://chatgptplugins.directory/plugins/atbash-safety.md): Guard tool calls with Atbash

---
Source: https://chatgptplugins.directory/plugins/skill-risk-check · Index: https://chatgptplugins.directory/llms.txt · Independent and community-run. Not affiliated with or endorsed by OpenAI. ChatGPT is a trademark of OpenAI.