Audit agent skills & MCP servers for prompt injection, secret exfiltration, and quality issues — before you run them.