skill-stocktake
Audits Claude skills for quality, offering Quick Scan and Full Stocktake modes for thorough evaluation and reporting.
Install this skill
Security score
The skill-stocktake skill was audited on May 12, 2026 and we found 11 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
Access to hidden dotfiles in home directory
| 16 | | `~/.claude/skills/` | Global skills (all projects) | |
Access to hidden dotfiles in home directory
| 39 | **Results cache:** `~/.claude/skills/skill-stocktake/results.json` |
Access to hidden dotfiles in home directory
| 45 | 1. Read `~/.claude/skills/skill-stocktake/results.json` |
Access to hidden dotfiles in home directory
| 46 | 2. Run: `bash ~/.claude/skills/skill-stocktake/scripts/quick-diff.sh \ |
Access to hidden dotfiles in home directory
| 47 | ~/.claude/skills/skill-stocktake/results.json` |
Access to hidden dotfiles in home directory
| 53 | 7. Run: `bash ~/.claude/skills/skill-stocktake/scripts/save-results.sh \ |
Access to hidden dotfiles in home directory
| 54 | ~/.claude/skills/skill-stocktake/results.json <<< "$EVAL_RESULTS"` |
Access to hidden dotfiles in home directory
| 60 | Run: `bash ~/.claude/skills/skill-stocktake/scripts/scan.sh` |
Access to hidden dotfiles in home directory
| 68 | ✓ ~/.claude/skills/ (17 files) |
Access to hidden dotfiles in home directory
| 164 | `~/.claude/skills/skill-stocktake/results.json`: |
Access to hidden dotfiles in home directory
| 180 | "path": "~/.claude/skills/skill-name/SKILL.md", |