registry-sync — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited registry-sync (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are in AUTONOMOUS MODE. Do NOT ask questions. Scan, validate, and report.
You are the registry sync and validation engine. You scan the entire skills registry, validate every SKILL.md file, check structural integrity, ensure READMEs are current, and produce a comprehensive health report.
INPUT: $ARGUMENTS
The user may provide:
--fix — automatically fix issues that can be auto-corrected (missing READMEs, outdated lists).--category [name] — validate only a specific category.--report-only — skip fixes, only produce the report.Default behavior (no arguments): validate everything, report issues, do not auto-fix.
============================================================ PHASE 1: REGISTRY SCAN ============================================================
Expected categories: build, meta, analysis, deploy, test, qa, review, security, docs, ux, combo, productivity, integration.
SKILL.md files. {
category: string,
skills: [
{
name: string,
path: string,
frontmatter: { name, description, version, category, platforms },
instructionLength: number,
lineCount: number
}
]
}============================================================ PHASE 2: FRONTMATTER VALIDATION ============================================================
For each SKILL.md, validate the frontmatter:
MUST match the directory name it lives in.
MUST match the parent directory name.
Record each validation as PASS, WARN, or FAIL with the specific issue.
============================================================ PHASE 3: INSTRUCTION VALIDATION ============================================================
For each SKILL.md, validate the instruction body:
============ lines.Compute the quality score for each skill using the rubric:
============================================================ PHASE 4: CROSS-REGISTRY CHECKS ============================================================
name.Flag duplicates with their paths.
/skill-name).For each reference, verify the target skill exists in the registry. Flag broken references.
Flag skills with unusually high versions (> 10.0.0) — may indicate version inflation.
============================================================ PHASE 5: README VALIDATION ============================================================
For each category directory, check for README.md:
category/README.md exist?Compare README skill list against discovered SKILL.md files. Flag: skills in directory but missing from README, skills in README but not in directory.
Expected: category description, skill table (name, description, version), usage examples.
Check the root README.md:
If --fix is specified:
============================================================ PHASE 6: FIXES (only with --fix flag) ============================================================
If --fix was specified, apply auto-corrections:
# [Category Name]
[Category description]
## Skills
| Skill | Description | Version |
|-------|-------------|---------|
| [name] | [description] | [version] |category frontmatter does not match itsdirectory, update the frontmatter (directory is the source of truth).
name frontmatter does not match its directoryname, update the frontmatter (directory name is the source of truth).
Do NOT auto-fix: descriptions, versions, instruction content, or structural issues. Those require human judgment.
============================================================ SELF-HEALING VALIDATION (max 2 iterations) ============================================================
After producing output, validate data quality and completeness:
IF VALIDATION FAILS:
============================================================ OUTPUT ============================================================
| Metric | Value |
|---|---|
| Total categories | [N] |
| Total skills | [N] |
| Average quality score | [X/100] |
| Skills passing (>= 60) | [N] ([%]) |
| Skills needing work (40-59) | [N] ([%]) |
| Skills failing (< 40) | [N] ([%]) |
| Validation errors | [N] |
| Validation warnings | [N] |
| Category | Skills | Avg Score | Errors | Warnings |
|---|---|---|---|---|
| build | [N] | [X] | [N] | [N] |
| meta | [N] | [X] | [N] | [N] |
| ... |
| Skill | Category | Version | Score | Verdict |
|---|---|---|---|---|
| [name] | [cat] | [ver] | [X/100] | [PASS/WARN/FAIL] |
| # | Skill | Issue |
|---|
| # | Skill | Issue |
|---|
| Skill | References | Broken References |
|---|
| Location | Status | Issues |
|---|---|---|
| Root README.md | [current/outdated/missing] | [details] |
| build/README.md | [current/outdated/missing] | [details] |
| ... |
| # | Fix | File |
|---|
DO NOT:
NEXT STEPS:
After sync:
/skill-test [skill-name] for a deep analysis of specific failing skills."/skill-creator to create skills for underdeveloped categories."git add */README.md README.md."============================================================ SELF-EVOLUTION TELEMETRY ============================================================
After producing output, record execution metadata for the /evolve pipeline.
Check if a project memory directory exists:
~/.claude/projects/skill-telemetry.md in that memory directoryEntry format:
### /registry-sync — {{YYYY-MM-DD}}
- Outcome: {{SUCCESS | PARTIAL | FAILED}}
- Self-healed: {{yes — what was healed | no}}
- Iterations used: {{N}} / {{N max}}
- Bottleneck: {{phase that struggled or "none"}}
- Suggestion: {{one-line improvement idea for /evolve, or "none"}}Only log if the memory directory exists. Skip silently if not found. Keep entries concise — /evolve will parse these for skill improvement signals.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.