Changelog — skill-audit

0.0.1 — 2026-08-30

• Initial version: five-step audit — runtime inventory, token weight, self-metadata flags, danger sweep (run-on-load, exfiltration, credential reach, injection-shaped text, obfuscation, scope creep), and a description-honesty check. Report-only; never edits the audited skill.