cp-skill-health-check — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited cp-skill-health-check (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when the user reports that a Commonplace KB is not working correctly: missing skills, commonplace-* command failures, validation not found, the agent runtime not seeing the venv, or confusion around direnv. It applies both to installed KBs, where shipped content lives under kb/commonplace/, and to the Commonplace source repo, where shipped content lives directly under kb/.
Target symptom: $ARGUMENTS
This skill diagnoses and reports. Do not edit shell config, rerun commonplace-init, install packages, or change symlinks unless the user explicitly asks for repair after seeing the diagnosis.
Run:
pwd
git rev-parse --show-toplevel 2>/dev/null || true
git remote -v 2>/dev/null || true
test -d kb && echo "kb: present" || echo "kb: missing"
test -f AGENTS.md && echo "AGENTS.md: present" || echo "AGENTS.md: missing"
test -f CLAUDE.md && echo "CLAUDE.md: present" || echo "CLAUDE.md: missing"
test -d kb/commonplace && echo "kb/commonplace: present" || echo "kb/commonplace: missing"
test -d src/commonplace && echo "src/commonplace: present" || echo "src/commonplace: missing"
test -d kb/reference && echo "kb/reference: present" || echo "kb/reference: missing"
test -d kb/instructions && echo "kb/instructions: present" || echo "kb/instructions: missing"
test -f .envrc && echo ".envrc: present" || echo ".envrc: missing"
test -d .venv && echo ".venv: present" || echo ".venv: missing"Interpretation:
kb/ means the user is probably not in the project root.kb/commonplace/ exists, classify the workspace as an installed KB.git remote -v URL names github.com:zby/commonplace or github.com/zby/commonplace, classify the workspace as the Commonplace source repo. Repositories can have multiple remotes; do not assume the relevant one is named origin or that there is only one remote. This is OK; do not warn about the missing shipped library namespace.src/commonplace/, kb/reference/, and kb/instructions/ exist while kb/commonplace/ is missing, report "source-repo-shaped workspace, git identity unknown" rather than treating it as an installed KB failure.kb/commonplace/ in any other workspace that claims to be installed means commonplace-init likely has not run, or the install is from an older layout.AGENTS.md and CLAUDE.md means the agent may not have a loaded control-plane file..envrc or .venv means command discovery will probably fail unless the package was installed globally.Run:
# Use find -L so it follows symlinked skill directories. The known
# .claude/.agents projections are usually symlinks into the canonical skill
# source tree, and plain `find` (without -L) will not descend into them,
# returning a misleading empty result.
find -L .claude/skills .agents/skills -maxdepth 2 -name SKILL.md -print 2>/dev/null | sort
# Derive the expected promoted set from the live skill source tree
# (kb/commonplace/instructions/ in an installed KB, kb/instructions/ in the
# Commonplace source repo). Do not check against a hardcoded skill list —
# it goes stale as skills are added or retired.
skill_src=kb/commonplace/instructions
test -d "$skill_src" || skill_src=kb/instructions
for skill in $(cd "$skill_src" && ls -d cp-skill-*); do
for dir in .claude/skills .agents/skills; do
test -e "$dir/$skill/SKILL.md" && echo "active skill OK: $dir/$skill" || echo "active skill MISSING: $dir/$skill"
done
done
find .claude/skills .agents/skills -maxdepth 1 -type l ! -exec test -e {} \; -print 2>/dev/null | sortThe per-skill test -e loop is the authoritative signal for whether each expected skill resolves (test -e follows symlinks). Treat the find -L listing as a cross-check for unexpected or extra skills, not the primary verdict.
The expected promoted set is the cp-skill-* directories in the skill source tree the loop derives from. In the Commonplace source repo, the installer's PROMOTED_SKILLS list in src/commonplace/cli/init_project.py is the authoritative manifest; if the loop's derived set and that list disagree, report the difference as a finding.
Interpretation:
.claude/skills/ or .agents/skills/ entries: commonplace-init likely did not run, the runtime is looking at a different project root, or the active runtime uses a different skill-discovery surface.active skill MISSING for an expected skill: the checked skill surface is incomplete. In an installed KB, rerun commonplace-init after confirming the project root and package install, or install/register kb/commonplace/instructions/<skill>/ in the active runtime's own skill surface. In the Commonplace source repo, recreate the local symlink to kb/instructions/<skill>/ or install/register that canonical skill directory in the active runtime's own surface.cp-skill-compile-collections, is a maintenance observation, not the likely cause of current Commonplace command or health-check failure when all expected active skills are OK.Run:
printf 'SHELL=%s\n' "$SHELL"
printf 'PATH=%s\n' "$PATH"
command -v commonplace-validate || true
command -v commonplace-init || true
command -v pytest || true
command -v python3 || true
command -v uv || trueInterpretation:
commonplace-validate and pytest resolving to a path under the project .venv/bin is the healthy state: agents must call these by bare name (no .venv/bin/ prefix, no direnv exec, no uv run wrapper). If the bare commands resolve, report Command PATH OK and flag any habit of prefixing as unnecessary — see the bullets in AGENTS.md under Development.commonplace-validate missing while .venv/bin/commonplace-validate exists usually means .venv/bin is not on PATH.pytest resolving outside the project venv is a sign the project environment was not loaded.uv missing only matters for install/update workflows; installed commonplace-* commands should not need uv run after environment activation.Run:
command -v direnv || true
direnv status || true
rg -n 'direnv hook (bash|zsh)' "$HOME/.bashrc" "$HOME/.bash_profile" "$HOME/.profile" "$HOME/.zshrc" 2>/dev/null || true
direnv exec . bash -c 'command -v commonplace-validate; command -v pytest; printf "UV_CACHE_DIR=%s\n" "$UV_CACHE_DIR"' || trueInterpretation:
direnv missing: install direnv or use explicit .venv/bin/<command> paths..envrc not allowed: run direnv allow from the project root.eval "$(direnv hook bash)" to ~/.bashrc for bash, or eval "$(direnv hook zsh)" to ~/.zshrc for zsh, then start a new interactive shell.direnv exec . bash -c ... succeeds but direct command -v commonplace-validate fails: direnv is configured, but the current agent command environment did not inherit it. Start the agent runtime from a direnv-loaded interactive shell, or launch it with direnv exec /path/to/project <agent-command>.direnv exec through bash -lc; login shell startup may reset PATH and hide the environment you are trying to inspect.Prefer direct commands when available. If direct commands are missing but direnv works, wrap them with direnv exec . bash -c.
If the workspace is an installed KB, run one of:
commonplace-validate kb/commonplace/reference/commands.mdor:
direnv exec . bash -c 'commonplace-validate kb/commonplace/reference/commands.md'If the workspace is the Commonplace source repo, validate:
direnv exec . bash -c 'commonplace-validate kb/reference/commands.md'Interpretation:
Report in this format:
Commonplace health check:
- Project root: OK / problem
- Layout: installed KB / source repo / problem
- Control-plane file: OK / problem
- Library layout: OK / problem
- Runtime skills: OK / problem
- Command PATH: OK / problem
- direnv: OK / problem
- Validator: OK / problem
Likely cause:
<one or two sentences>
Recommended fix:
<concrete next command or user action>
Evidence:
- <short command result>
- <short command result>
Maintenance observations:
- <retired or extra broken symlinks, stale generated indexes, or other non-blocking findings; write "None" if empty>If several independent problems appear, list them in the order that blocks the most downstream checks:
commonplace-init did not run or installed layout is stale.venv/bin is not on PATHDo not claim the installation is fixed unless you reran the failing check and it passed.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.