A third-party skill is not a document. It is a set of instructions your agent will follow with your local permissions, plus whatever scripts, hooks and configs ship next to it, plus whatever it tells the agent to install. Treat it as untrusted until you have read what it can make the agent do.
This prompt runs a read-only audit inside Claude Code. It maps what the skill would execute, install, read, send over the network and change in your Claude config, follows the files SKILL.md references, treats the skill's own text as data rather than instructions, and returns a verdict with file:line evidence and the commit it reviewed. It installs and executes nothing.
Replace <SKILL_URL_OR_PATH> and paste the whole block into Claude Code.