Security

现象描述:校验skill是否合格

Try it

Audit another Codex skill for structural compliance, trigger quality, instruction clarity, reuse of scripts or references, and overall maintainability. Use w...

What it does

Audit another Codex skill for structural compliance, trigger quality, instruction clarity, reuse of scripts or references, and overall maintainability. Use w...

The skill document

Skill Quality Auditor

Overview

Evaluate a target skill with a consistent rubric and return a clear pass/fail-style verdict plus a multi-dimensional review. Prefer the bundled script for the first pass, then turn the raw findings into a concise human-readable assessment.

Workflow

  1. Identify the target skill folder.
  2. Run scripts/evaluate_skill.py .
  3. Read the report and group findings into:
    • final verdict
    • strengths
    • weaknesses
    • critical blockers
    • recommended fixes
  4. If the script reports missing context or borderline results, inspect the target skill's SKILL.md and any referenced resources before writing the final judgment.
  5. Keep the final answer decisive: say whether the skill is currently qualified, conditionally qualified, or not qualified.

Rubric

Score the skill across these dimensions:

  • structure: required files, frontmatter validity, naming, obvious TODO placeholders
  • triggering: whether description clearly explains what the skill does and when to use it
  • workflow: whether the body gives actionable steps instead of vague guidance
  • progressive_disclosure: whether detailed material is kept in scripts or references instead of bloating SKILL.md
  • resources: whether scripts, references, and assets are included only when useful and are mentioned in the body
  • examples_and_outputs: whether the skill helps the agent understand expected usage or output shape
  • maintainability: clarity, concision, stale metadata checks, and overall ease of iteration

Use references/rubric.md when you need the detailed scoring logic and interpretation rules.

Verdict Rules

Use these labels:

  • Qualified: no critical blockers and score is strong enough for immediate use
  • Borderline: usable but needs material fixes soon
  • Not Qualified: missing required structure or too weak to trust in repeated use

Treat these as critical blockers:

  • missing SKILL.md
  • invalid or missing YAML frontmatter
  • missing name or description
  • unresolved template placeholders such as TODO
  • description too weak to trigger reliably
  • instructions too incomplete to execute the core task safely

Output Shape

Prefer this response shape:

Verdict

State Qualified, Borderline, or Not Qualified in the first sentence and explain the main reason.

Score Summary

Include the total score and 3-5 highest-signal dimension notes.

What Works Well

List concrete strengths tied to files or sections.

What Needs Work

List concrete weaknesses tied to files or sections.

Next Fixes

List the smallest set of changes most likely to move the skill to Qualified.

Script

Run:

python3 scripts/evaluate_skill.py /absolute/path/to/skill

Optional JSON mode:

python3 scripts/evaluate_skill.py /absolute/path/to/skill --json

The script is dependency-free and performs a deterministic first-pass audit. It is intentionally conservative: if a skill barely explains its trigger conditions or still contains template leftovers, the script should flag it instead of assuming good intent.

Review Rules

  • Prefer evidence over taste.
  • Praise strengths explicitly; do not only list problems.
  • Distinguish hard failures from improvement opportunities.
  • If the target skill intentionally omits scripts, references, or agents metadata, do not penalize that by itself.
  • Penalize unused or stale directories when they add confusion.
  • When inferring quality from wording, cite the exact section or file that led to the conclusion.

Trigger Examples

  • "Check whether this skill is规范合格."
  • "Review this skill and tell me if it passes."
  • "Audit this skill folder and summarize the good and bad."
  • "Evaluate this skill against best practices and give me a verdict."

Related skills

对已存在 Skill 做 8 维度全面体检(结构/安全/触发/有效性/竞争/平台/文档/代码质量)。说 技能审计/审计技能/技能体检 时触发。支持成熟度分级+4确认点+整改+回归审计。绝不自动发布。Do NOT use for creating skills or publishing to platforms.

Audit a target SKILL.md against the Agent Skills specification and generate a Chinese HTML report. Use when the user asks to check, audit, review, or optimiz...

21 installs

Agent skill quality checker. Input a skill directory or skill files; output trigger clarity, metadata issues, examples, safety boundaries, installability, po...

36 installs

Generic skill-quality auditor for any agent skill (Claude, OpenClaw, Cursor, etc.). Runs a 7-dimension static analysis (D1 process closure & idempotency, D2 tool/command conventions, D3 portability & defense, D4 skill usability, D5 security & op risk, D6 code & doc quality, D7 dependency & footprint) with explicit ERR / WARN severity, 120-point scoring (pass line 90 + zero ERR), and an opt-in `--fix` workflow that always backs up first. Two depths: L1 static (~2 min) and L2 dryRun (~5 min, read-only hub + reachability checks). Strict red lines — read-only by default, never executes the audited skill's writes. Use when the user asks to "audit a skill", "check skill quality", "is this skill ready to ship", "lint my skill", or runs this tool by name. Triggers also: "审计这个 Skill"、"检查 Skill 质量"、"Skill 能上线吗"、 "skill-deep-audit"、"审一下 xxx skill"。

1 installs1 stars

Deterministic TRACE+ quality scorer for Agent Skills (SKILL.md): six dimensions T-R-F-S-I-E, 30 sub-items, merges TRACE, good-skill authoring reverse-rubric...

6 installs1 stars

Pre-publish quality and safety auditor for AI agent skills (SKILL.md + scripts/ + references/ format used by Claude Code, Cursor, OpenAI Codex, GitHub Copilo...

1 installs