vetskill: scan a Claude Code skill for hidden instructions and credential theft before you install it

An open-source, offline scanner for agent skills, plugins and MCP configs. It finds invisible instructions, secret reads, exfiltration and unpinned packages with file:line evidence, then asks a cheap model for a second opinion it can't be talked out of.