skill-audit — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-audit (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill to audit existing skills, turn workflow knowledge into useful agent skills, and review skill libraries at the strategy level. It complements skill-creator: use this skill to decide what a skill should be, how it should fit a library, and what needs improvement; use skill-creator when the user wants the concrete SKILL.md implementation and eval loop.
This workflow is based on Anthropic's June 3, 2026 blog post, "Lessons from building Claude Code: How we use skills": https://claude.com/blog/lessons-from-building-claude-code-how-we-use-skills
A good skill is not "some markdown about a topic." It is a compact extension point that gives the agent non-obvious domain knowledge, reusable files, deterministic helpers, setup rules, verification habits, and guardrails at the moment they matter.
Create or improve a skill only when at least one of these is true:
otherwise not inferable from general model knowledge.
Do not make a skill when the content only restates obvious coding behavior, generic best practices, or one-off instructions.
Read references/skill-taxonomy.md and classify the candidate into exactly one primary category. If it appears to span several categories, tighten the scope or split it.
Report:
Use assets/skill-brief-template.md for the output. Fill it with:
escalated before acting
path and what evidence it must cite
recovery steps should be promoted
Keep SKILL.md focused on activation, decisions, and the main workflow. Move details into support files:
references/ for tables, API conventions, taxonomy, playbooks, and long docsscripts/ for deterministic actions or repetitive checksassets/ for templates, report formats, starter files, or examplesagents/ for specialized subagent prompts when the repo supports themevals/ for realistic prompts and objective assertionsTell the agent exactly when to read each support file.
Read references/writing-and-operations.md when deciding:
When the user wants the skill built, pass the brief into skill-creator and ask it to implement the files, generate realistic test prompts, and run validation.
If editing an existing skill, include the exact file paths and the smallest content changes needed. Do not rewrite unrelated skill behavior.
For advisory requests, answer with:
trigger description
For repository work, actually create or update the files, then run the repo's skill validation command.
checklists, templates, and verification.
files.
phrases and contexts that should trigger the skill.
decision criteria, and escape hatches.
validation commands, example prompts, expected artifacts, or usage metrics.
escalation boundaries, and end-state checks that should change behavior.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.