skill-validator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-validator (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Validate and repair Claude Code skills — detect broken references, deprecated tools, syntax errors, and auto-fix issues.
Scans ~/.claude/skills/ and ~/.claude/commands/ in bulk to catch skill corruption caused by CLI updates, tool deprecations, or path changes.
npm install -g claude-skill-validatorOr run without installing:
npx claude-skill-validator# Basic scan (scans ~/.claude by default)
claude-skill-validator
# Verbose output
claude-skill-validator --verbose
# Check for updates from source repositories
claude-skill-validator --update-check
# JSON output
claude-skill-validator --json
# Scan skills/ only
claude-skill-validator --skills-only
# Scan commands/ only
claude-skill-validator --commands-only
# Specify a custom Claude config directory
claude-skill-validator --dir /path/to/.claude
# Auto-fix fixable issues (with backup)
claude-skill-validator --fix
# Preview fixes without applying
claude-skill-validator --dry-run| Check | What it verifies | Severity |
|---|---|---|
frontmatter | name and description fields exist in SKILL.md | WARN |
file-ref | Referenced files in INSTRUCTIONS.md, scripts/, references/ exist | FAIL |
tool-ref | Deprecated MCP tool references are detected | FAIL |
cmd-ref | Bash commands referenced in skills exist in PATH | WARN |
path-ref | Hardcoded absolute paths exist on disk | WARN |
syntax | .js, .py, .sh files in scripts/ have valid syntax | FAIL |
update | Skill source repositories have newer versions available | WARN |
📦 nano-banana
❌ [tool-ref] Deprecated tool reference: tabs_context_mcp (deprecated — use browser-cli)
❌ [tool-ref] Deprecated tool reference: read_page (deprecated — use browser-cli snapshot)
📦 api-design-reviewer
❌ [syntax] api_linter.py syntax error: SyntaxError: invalid syntax
============================================================
📊 Scan Summary
Target directory: /Users/you/.claude
Total checks: 450
✅ PASS: 380 ⚠️ WARN: 60 ❌ FAIL: 10| Option | Description |
|---|---|
--dir <path> | Claude config directory (default: ~/.claude) |
--skills-only | Scan skills/ directory only |
--commands-only | Scan commands/ directory only |
--json | Output results as JSON |
--verbose | Show all checks including PASS |
--quiet | Show FAIL only; WARN count appears in summary |
--strict | Show frontmatter WARN entries (hidden by default) |
--update-check | Check for updates from source repositories |
--update | Apply available updates (implies --update-check) |
--fix | Auto-fix fixable issues (creates backups) |
--dry-run | Preview fixes without applying changes |
--self-update | Update claude-skill-validator itself to the latest version |
--no-version-check | Skip npm version check (useful in CI) |
--help, -h | Show help message |
commands/)This package ships two Claude Code slash commands in commands/:
| Command | File | What it does |
|---|---|---|
/skill-validate | commands/skill-validate.md | Run a full scan (all options exposed) |
/skill-validate-fix | commands/skill-validate-fix.md | Guided dry-run → fix → verify flow |
Install the package globally and the commands become available in Claude Code immediately:
npm install -g claude-skill-validator| Code | Meaning |
|---|---|
0 | No issues (no FAILs) |
1 | FAILs found (action required) |
2 | Tool error |
fs, path, child_process, os only)MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.