Skip to main content
Back to all repositories
KA

trust-me-bro

Every skill you install says trust me bro. This one reads it first. Pre-install audit for agent skills, plugins, and MCP servers: lethal-trifecta reach, injection wording, provenance, and drift after approval.

0stars0forks0watchers/subscribers1issues
agent-securityagent-skillsai-securityclaude-codecodexlethal-trifectamcpprompt-injectionprovenancesecurity-toolsskillsupply-chain-security
Language
Python
License
Apache License 2.0
Size
219 KB
Created
Aug 20, 2026
Last Updated
Aug 24, 2026
Last Pushed
Aug 31, 2026

Available Plugins

Loading plugins...

Evaluate before installing

  1. Review the source repository, recent maintenance, and license on GitHub.
  2. Read the marketplace manifest and plugin source files before running commands.
  3. Start with the smallest required permission set and validate behavior in a safe environment.