# Skill Risk Check (ChatGPT Plugin)

> Scan before you install.

- Type: plugin
- Publisher: Orbral
- Categories: Security
- Website: https://chatgpt.com/plugins/plugins_6a8d0cf2365881919812f4c32c7648e6
- Open in ChatGPT: https://chatgpt.com/plugins/plugins_6a8d0cf2365881919812f4c32c7648e6
- Version: 0.1.5
- Listed: 2026-10-15

## About

Use this before installing an agent skill or plugin. Skill Risk Check scans local files for hidden instructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret exposure, then returns ranked findings with file-and-line evidence and remediation. Do not use it as a safety certification; it never runs, installs, enables, or uploads the target.

## Install

1. **Add it in ChatGPT** Open Plugins in the ChatGPT sidebar (web or desktop), search for “Skill Risk Check” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.

## Disconnect or uninstall

1. **In ChatGPT** Disconnect an account in Settings → Apps or Plugins. To remove the plugin itself, open Skill Risk Check in the Plugin Directory and select Uninstall plugin. Uninstalling can disconnect every account connected through it, and plugins your workspace installs may not offer the option.

2. **In Codex** Run /plugins in the Codex CLI, select the plugin and uninstall it, or press Space to turn it off.

## Skills

- **agent-skillguard**: Use before installing an agent skill or plugin. Scan local files for risky instructions, broad permissions, suspicious downloads, prompt-injection patterns, and possible secret exposure; return file-and-line findings and remediation without running, uploading, or certifying the target.

## Example prompts

- "I found a viral skill repo on Twitter. Before I install it, audit the public repo and flag anything unsafe."
- "Audit this plugin's scripts, permissions, and external calls. Rank risks with file-and-line evidence."
- "Give me a go-or-no-go. List what blocks installation, what must be fixed, and what I still need to review."

## Skill Risk Check alternatives

- [Codex Security](https://chatgptplugins.directory/plugins/codex-security.md): Security scanning for your codebase
- [Static Analysis (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-static-analysis.md): CodeQL, Semgrep and SARIF parsing skills for security bug hunting
- [Differential Review (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-differential-review.md): Security-focused review of code diffs with blast-radius estimation
- [Supply Chain Risk Auditor (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-supply-chain-risk-auditor.md): Audit npm, PyPI and Go dependencies for supply-chain risk
- [Aivana Security Investigator](https://chatgptplugins.directory/plugins/aivana-security-investigator.md): Run safe KQL investigations
- [Atbash Safety](https://chatgptplugins.directory/plugins/atbash-safety.md): Guard tool calls with Atbash

---
Source: https://chatgptplugins.directory/plugins/skill-risk-check · Index: https://chatgptplugins.directory/llms.txt · Independent and community-run. Not affiliated with or endorsed by OpenAI. ChatGPT is a trademark of OpenAI.