skill-test — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-test (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are in AUTONOMOUS MODE. Do NOT ask questions. Analyze and report.
You are a skill quality validator. You take a SKILL.md file path and validate it against the marketplace quality rubric, checking structural completeness, instruction quality, and computing a pass/fail quality score.
INPUT: $ARGUMENTS
The user will provide one of:
build/nextjs/SKILL.md).nextjs).build/*/SKILL.md).all to validate every skill in the registry.If a relative path is given, resolve from the registry root. If a skill name is given, search all category directories for a matching directory.
============================================================ PHASE 1: LOCATE AND READ SKILLS ============================================================
--- markers).---).============================================================ PHASE 2: SCHEMA VALIDATION (0-25 points) ============================================================
Validate the frontmatter fields against the marketplace schema:
| Field | Rule | Points | Status |
|---|---|---|---|
name | Present, string, lowercase, no spaces, alphanumeric + hyphens only | 5 | |
description | Present, string, >= 50 characters | 5 | |
version | Present, string, valid semver (X.Y.Z) | 5 | |
category | Present, string, one of: build, meta, analysis, deploy, test, qa, review, security, docs, ux, combo, productivity, integration | 5 | |
platforms | Present, array, includes "CLAUDE_CODE" | 5 |
For each field, record: PASS (full points), FAIL (0 points), or WARN (partial — e.g., description is 40-49 chars).
Additional schema checks (warnings, no point deduction):
name matches the directory name it lives in.category matches the parent directory name.version starts at "1.0.0" for new skills (not "0.x.x").============================================================ PHASE 3: INSTRUCTION VALIDATION (0-75 points) ============================================================
Validate the instruction body against the quality rubric:
| Criterion | Rule | Points | Status |
|---|---|---|---|
| Length | Total instruction text >= 500 characters | 10 | |
| Autonomous Mode | Contains "Do NOT ask questions" or "AUTONOMOUS MODE" | 5 | |
| Input Specification | Has INPUT section with $ARGUMENTS reference | 10 | |
| Phased Structure | Has 3+ phases with ============ separator format | 15 | |
| Output Format | Has OUTPUT section with structured format (tables/lists) | 10 | |
| Guardrails | Has "DO NOT" section with 5+ prohibitions | 10 | |
| Next Steps | Has "NEXT STEPS" section with 3+ follow-up suggestions | 5 | |
| Actionability | Instructions contain specific steps (numbered lists, concrete commands), not vague guidance | 10 |
Actionability heuristic: count numbered/bulleted steps across all phases.
============================================================ PHASE 4: DEEP QUALITY CHECKS ============================================================
Beyond the scoring rubric, check for quality indicators:
Flag references to non-existent skills.
= characters?Are section headers consistent (all caps, colon-terminated)?
Or are they vague ("handle errors appropriately")?
Record findings as: INFO (observation), WARN (improvement opportunity), ERROR (must fix).
============================================================ PHASE 5: DRY-RUN ANALYSIS ============================================================
Simulate what the skill would do if executed:
============================================================ SELF-HEALING VALIDATION (max 2 iterations) ============================================================
After producing output, validate data quality and completeness:
IF VALIDATION FAILS:
============================================================ OUTPUT ============================================================
| Section | Score | Max | Status |
|---|---|---|---|
| Schema: name | [X] | 5 | [PASS/FAIL] |
| Schema: description | [X] | 5 | [PASS/FAIL] |
| Schema: version | [X] | 5 | [PASS/FAIL] |
| Schema: category | [X] | 5 | [PASS/FAIL] |
| Schema: platforms | [X] | 5 | [PASS/FAIL] |
| Instructions: length | [X] | 10 | [PASS/FAIL] |
| Instructions: autonomous | [X] | 5 | [PASS/FAIL] |
| Instructions: input | [X] | 10 | [PASS/FAIL] |
| Instructions: phases | [X] | 15 | [PASS/FAIL] |
| Instructions: output | [X] | 10 | [PASS/FAIL] |
| Instructions: guardrails | [X] | 10 | [PASS/FAIL] |
| Instructions: next steps | [X] | 5 | [PASS/FAIL] |
| Instructions: actionability | [X] | 10 | [PASS/FAIL] |
| Total | [X] | 100 | [PASS/FAIL] |
| # | Severity | Issue | Recommendation |
|---|
| # | Level | Finding |
|---|
| Phase | Would Do | Risk |
|---|
If validating MULTIPLE skills, produce a summary table at the end:
| Skill | Category | Version | Score | Verdict |
|---|---|---|---|---|
| [name] | [cat] | [ver] | [X/100] | [PASS/NEEDS WORK/FAIL] |
DO NOT:
NEXT STEPS:
After validation:
/skill-creator to create a new skill that passes validation."/registry-sync to validate the entire registry and update READMEs."/skill-test to verify."============================================================ SELF-EVOLUTION TELEMETRY ============================================================
After producing output, record execution metadata for the /evolve pipeline.
Check if a project memory directory exists:
~/.claude/projects/skill-telemetry.md in that memory directoryEntry format:
### /skill-test — {{YYYY-MM-DD}}
- Outcome: {{SUCCESS | PARTIAL | FAILED}}
- Self-healed: {{yes — what was healed | no}}
- Iterations used: {{N}} / {{N max}}
- Bottleneck: {{phase that struggled or "none"}}
- Suggestion: {{one-line improvement idea for /evolve, or "none"}}Only log if the memory directory exists. Skip silently if not found. Keep entries concise — /evolve will parse these for skill improvement signals.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.