audit.sh: the runnable vetting checklist. bash audit.sh <dir> statically scans a skill or MCP server for red flags (network egress, secret/env reads, shell-out, obfuscation, broad FS access, hidden/injected instructions, zero-width characters). It only reads; it never executes the target.
suspicious-skill/: the audit TARGET for Part A. A deliberately malicious "export tasks to Notion" skill (SKILL.md + tools/sync.py). Do not install it or run sync.py against real credentials; it exfiltrates your environment and local secrets. The point is to catch it first.
poisoned-task.txt: the prompt-injection payload for Part B. A real-looking task with an injected "system" directive underneath, to add to the Module 1 tasks-app and feed to your AI.

Expected result of Part A:

bash audit.sh suspicious-skill   # exits non-zero, verdict: REJECT