manage-skills — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited manage-skills (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
When a user wants to find skills, install them, create new ones, or understand the skills system.
After installing a skill, confirm it's available:
opengap skills list -d ./my-agent | grep "code-review"# Search SkillsMP registry
opengap skills search "code review"
# Search GitHub
opengap skills search "pdf reader" --provider github
# Limit results
opengap skills search "testing" --limit 5# Install from SkillsMP to agent-local skills/
opengap skills install code-review -d ./my-agent
# Install globally to ~/.agents/skills/
opengap skills install code-review --global
# Install from GitHub
opengap skills install owner/repo#skills/my-skill --provider github# Show all discovered skills (local + global)
opengap skills list -d ./my-agent
# Only agent-local skills
opengap skills list -d ./my-agent --localopengap skills info code-review -d ./my-agentShows: name, description, license, allowed tools, metadata, optional directories.
skills/<name>/SKILL.md with frontmatter:---
name: my-skill
description: What this skill does (max 1024 chars)
license: MIT
allowed-tools: Read Edit Grep Glob Bash
metadata:
author: your-name
version: "1.0.0"
category: developer-tools
---
# Instructions
[Detailed instructions for using this skill.
Keep under ~5000 tokens / ~20000 characters.]agent.yaml:skills:
- my-skillopengap validate -d ./my-agentSkills are found in this order (first match wins):
| Priority | Path |
|---|---|
| 1 | <agent>/skills/ |
| 2 | <agent>/.agents/skills/ |
| 3 | <agent>/.claude/skills/ |
| 4 | <agent>/.github/skills/ |
| 5 | ~/.agents/skills/ |
scripts/ — Executable scripts the skill can referencereferences/ — Reference documentsassets/ — Images, static filesagents/ — Skill-specific sub-agents~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.