AI agent skills security is now a developer risk. Use this audit checklist to review permissions, prompt injection exposure, secrets, and CI safety.