kafka-schema-review — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited kafka-schema-review (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Reviews schema changes for compatibility and evolution best practices. A single breaking schema change can take down every consumer of a topic.
Target environment: $ARGUMENTS
Copy this checklist and track your progress:
Schema Review Progress:
- [ ] Step 1: Fetch registered schemas
- [ ] Step 2: Scan codebase for schema files
- [ ] Step 3: Detect breaking changes
- [ ] Step 4: Check schema quality
- [ ] Step 5: Check schema drift
- [ ] Step 6: Generate reportreferences/compatibility-rules.md for file types)references/compatibility-rules.mdUse Lenses MCP tools to get the current state of schemas in the cluster:
list_topic_metadata - get all schemas registered against topics (key and value)get_topic_metadata - get the current schema for a specific topicget_dataset - get dataset field-level details, policies and governance metadatalist_datasets with schema_format filter - find all topics using a given format (AVRO, JSON, PROTOBUF)Expected output: Map of topics to their registered schemas (key and value) with format and version info.
Validation: If no schemas are registered, note this as a governance gap and proceed with codebase-only analysis.
Search the codebase for schema definition files. Consult references/compatibility-rules.md for the full list of file types and search patterns.
Use git diff to identify recently changed schema files if reviewing a PR.
For each schema change, evaluate against the compatibility rules in references/compatibility-rules.md. Check backward, forward and full compatibility depending on the topic's configured compatibility level.
Apply the quality checks from references/compatibility-rules.md:
Compare schema files in the repo against schemas registered in the cluster:
execute_sql to sample live data and verify it matches the expected schemaUser says: "Review the schema changes in this PR"
Actions:
git diff to find changed .avsc, .proto or .json schema filesResult: Report listing any breaking changes with migration guidance
User says: "Audit all schemas in the staging environment"
Actions:
list_topic_metadataResult: Comprehensive report covering compatibility, quality and drift
User says: "Consumers are failing to deserialise messages from orders.payment.completed"
Actions:
get_topic_metadataexecute_sql to see actual message formatResult: Diagnosis of schema mismatch with remediation steps
Cause: Schema Registry is not configured or topics use schemaless formats (plain JSON, CSV). Solution: This is a valid finding - report it as a governance gap rather than an error. Recommend adding schema registration.
Cause: The cluster schema was updated independently of the repo (e.g., via Schema Registry UI). Solution: Report the drift and recommend syncing the repo to match the cluster as the source of truth.
Cause: Topic is empty, permissions are restricted or the topic uses an unsupported format. Solution: Note the limitation in the report. Use get_topic_metadata as a fallback for schema information.
## Schema Review Report
### Environment: {name}
### Breaking Changes (must fix before merge)
- [schema-file] Description of the breaking change
Affected topics: {list}
Migration: {guidance}
### Compatibility Warnings
- [schema-file] Description of the issue
Recommendation: How to fix it
### Schema Quality
- [schema-file:field] Description of the quality issue
Recommendation: How to improve it
### Schema Drift
- [topic-name] Schema in repo differs from registered schema
Repo version: {summary} | Cluster version: {summary}
### Summary
- X breaking changes found
- Y compatibility warnings found
- Z quality issues found
- Schema files scanned: N
- Topics with drift: M~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.