Save, search, and manage personal notes and knowledge bases in Get笔记 on explicit request.
Security
skill-usefulness-audit
Try itReview installed agent skills for actual usage, overlap, and cleanup candidates without auto-deletion.
What it does
Runs a multi-layer audit of installed skills covering usage evidence, metadata overlap, user-provided skill-on versus skill-off results, runtime and bundle burden, static health, and optional community metrics. The bundled script classifies each skill as api, tool, or general and computes a 10-point score from the scoring rubric. Output is a short natural-language report plus an optional detailed Markdown evidence file; deletion, merge, and quarantine are always returned as manual-review recommendations and never executed automatically. Pass --usage-file, --history-file, --ablation-file, or --community-file when those artifacts exist; without them the audit runs in structure-only mode with …
When to use it
- Spotting installed skills that have not been invoked recently before trimming context
- Deciding whether two skills overlap enough to merge or retire one
- Generating an ablation plan and cost estimate for replaying general-purpose skills
- Producing a Markdown audit report to attach to a maintenance ticket
The skill document
Skill Usefulness Audit
Manual Trigger Only
Use this skill only after a direct request to audit installed agent skills, their usage, overlap, cleanup options, or a structure-only inventory. Do not invoke it during normal tasks or use it for ordinary repository/source-code review, general security audit, or employee/human skill assessment.
Safety
Never delete, merge, quarantine, isolate, or disable skills automatically.
Treat delete, merge-delete, and quarantine-review as manual-review recommendations.
Do not delete skills based only on a structure-only report.
This tool does not automatically replay historical conversations; it generates ablation plans and reads ablation result files that the user provides.
Audit Scope
Audit these layers in order:
- Usage evidence, including recency and source quality.
- Installed metadata, instructions, and functional overlap.
- User-provided skill-on versus skill-off results for general skills.
- Runtime and bundle burden, including over-triggering, context cost, weak progressive disclosure, redundant resources, script failures, and private-looking files.
- Static health and risk hints.
- Optional offline community or registry metrics.
Treat API and tool skills as protected capability skills during ablation. Examples: Excel, DOCX, PDF, browser automation, deployment, OCR, external API wrappers, MCP/API gateway helpers.
Workflow
- Collect user-provided roots before host-local defaults.
- Load only the usage, history, ablation, and community evidence that is available.
- Inspect each
SKILL.mdand its script/reference/asset metrics. - Let the bundled script classify each skill as
api,tool, orgeneraland calculate its score. Read{baseDir}/references/scoring-rubric.mdonly when checking or explaining a score, verdict, or action. - Print the short usefulness report and, when requested, write Markdown evidence or an ablation plan.
Ablation Rules
Read {baseDir}/references/ablation-protocol.md only when running replays, preparing normalized ablation records, or reviewing mixed or delete-boundary results. The script can generate an ablation plan without loading the protocol.
Replay only selected general candidates with identical prompts/artifacts and pairwise judging.
Do not fake no-tool ablation for api or tool skills; use the rubric's protected-capability branch.
Run the Audit
Run the audit after collecting available evidence:
REPORT_LANGUAGE=en # use zh-CN when the current user invocation is Chinese
python "{baseDir}/scripts/skill_usefulness_audit.py" audit \
--skills-root ./skills \
--report-language "$REPORT_LANGUAGE" \
--markdown-out ./skill-audit-report.md
OpenClaw expands {baseDir} to the installed skill directory. Use it for bundled scripts and references.
Add evidence only when available:
--usage-file: JSON, JSONL, CSV, or TSV with per-skill usage.--history-file: raw transcripts used only when direct usage is weak or missing; mentions remainhistory_mentions/suspected_invocations, notcalls.--ablation-file: normalized JSON or JSONL skill-on/skill-off results.--community-file: offline JSON, JSONL, CSV, or TSV registry metrics.--ablation-plan-out: a cost estimate and focused replay plan; its case counts can be overridden with the four--ablation-*-casesoptions documented by--help.--json-out: machine-readable evidence only when requested or needed by another tool.
Pass --report-language zh-CN for a Chinese invocation and --report-language en for an English invocation. auto reads SKILL_AUDIT_REPORT_LANGUAGE or the process locale, then falls back to English.
Run without extra files only when you need a structure-only audit. Usage, community, and ablation evidence become lower-confidence in that mode. History and usage files may contain sensitive conversations, local paths, project names, and customer data. Missing env means not configured in the current audit process, not proof that the skill is broken in every host.
Output Contract
Use one run for both output layers; do not ask the user to choose a quick or full mode.
Standard output is a short natural-language report. Its opening paragraph states the audited skill count and the total characters plus approximate tokens of loaded entry descriptions. Lead with actual usage, not static risk or bundle health, and keep scores, internal codes, risk flags, and tables out of this layer.
When --markdown-out is provided, write the detailed evidence—with scores, action codes, missing evidence, burden, and risk notes—in the same run.
Match the user's language: clean Chinese for zh-CN and clean English for en, except for skill names and unavoidable paths or commands.
Copy the short report to chat verbatim, apart from making its evidence path clickable. Do not paste raw JSON or the full Markdown evidence unless the user asks. Read {baseDir}/references/report-narration-prompt.md only when another agent or host must deliver an already-generated report.
JSON includes report_mode, per-skill score_breakdown, quality_penalty, quality_penalty_uncapped, quality_evidence, community_breakdown, action_advice, and risk_review. It includes ablation_plan only when --ablation-plan-out is used. JSON emits both risk_* and static_risk_* with identical values, and total_score as an alias of local_score; treat risk_* and local_score as canonical.
Keep deletion advice conservative for system or host-core skills, and prefer narrowing or merging when overlapping skills still serve distinct host integrations.
Resources
{baseDir}/scripts/skill_usefulness_audit.py: compatibility wrapper for the modular audit package.{baseDir}/scripts/skill_usefulness_audit_lib/: collect metadata, score skills, scan static risk hints, and render Markdown reports plus optional JSON artifacts.{baseDir}/references/report-narration-prompt.md: concise prompt for turning the report into a user-facing conversational summary.{baseDir}/references/scoring-rubric.md: 10-point scoring rules, confidence logic, community prior, and action thresholds.{baseDir}/references/ablation-protocol.md: normalized replay method for historical conversations.
Questions people ask
- Will the audit delete, merge, or disable skills for me?
- No. The skill treats delete, merge-delete, and quarantine-review strictly as manual-review recommendations and never performs those actions automatically.
- Does it replay my past conversations?
- No. It reads ablation result files you supply, or generates an ablation plan from a bundled script; it does not auto-replay historical transcripts.
- Why are api and tool skills handled differently?
- They count as protected capability skills (for example Excel, DOCX, PDF, browser automation, deployment, OCR, external API wrappers, MCP/API gateway helpers) and follow a separate branch in the scoring rubric.
Related skills
Write, debug, and tune Playwright specs with locator strategy, trace diagnosis, and CI-aware timeouts.
More from gongyu0918-debug
Browse all skillsDraft, rewrite, or review Chinese official documents and formal working materials with strict fact boundaries.
中文论文、开题报告与文献综述的起草、改写、审稿和证据核对
Use for budget desktop PC build planning and recommendations, PC hardware DIY, upgrades, configuration completion, compatibility checks, hardware guidance, local LLM GPU/VRAM/RAM sizing, and gaming, streaming, creator, aesthetic, compact or ITX builds. Bundled prices are China-market CNY references; explicit user overlays keep currencies separate. 中文支持预算装机、装机 DIY、整机推荐、旧机升级、配置补全、搭配或兼容检查、硬件问答,以及游戏直播、生产力、本地 AI、外观海景房和紧凑或 ITX 主机。 Do not use for laptops, server procurement, ordering or payment, remote control, security isolation, or standalone software, game or agent tutorials.
Three-route soft router for pressured coding-agent work.