Skip to content
Back to skills

Readme

ASecurity

Audit, write, or revise README.md. Use when creating a README, editing one, or noticing smells (missing badges, no install steps, unclear purpose, no engagement guidance). Applies ddbeck's checklist and a shields.io badge principle.

  • 2 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 1, 2026
ai-agentsgit

Security analysis

A100/100

Scanned September 1, 2026

npx -y skills add alunduil/alunduil-chezmoi --skill readme --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Readme?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Readme
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/alunduil-readme/badge)](https://www.skillsdirectory.com/skills/alunduil-readme)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: readme
description: Audit, write, or revise README.md. Use when creating a README, editing one, or noticing smells (missing badges, no install steps, unclear purpose, no engagement guidance). Applies ddbeck's checklist and a shields.io badge principle.
---

# README

Reference: <https://github.com/ddbeck/readme-checklist/blob/main/checklist.md>

## Checklist (condensed)

**Identify** — project name as first heading; repo/homepage URL near top; owner/author named.

**Evaluate** — describe *why* (what it achieves), not *what* (what it's made of). Active voice, second person. License named (open source) or authorized users named (closed source).

**Use** — prerequisites before install; install + basic usage, tested.

**Engage** — pointer to deeper docs (CONTRIBUTING, LICENSE, CHANGELOG, etc.) when they exist; where to get help (or explicit "no support"); how to contribute (or explicit "not accepting").

**Final** — TOC for 10+ screens; split into files past that.

## Badges (shields.io)

Each badge earns its place: real-time, decision-relevant info not already visible on the rendered page (e.g. on github.com).

Usually qualifies:

- License — `img.shields.io/github/license/<owner>/<repo>` — survives off-GitHub renders.
- Code coverage when codecov/coveralls is wired up.
- Tool/config presence (pre-commit, Renovate, Dependabot) when used.
- Single-target platform/runtime when exactly one is supported.

Usually doesn't:

- CI status — GitHub shows it on commits; multi-workflow makes "build" ambiguous. Promote only when one named workflow is the gate.
- Last commit — already on the GitHub page.
- Release version — already on the sidebar; promote when README is rendered off-GitHub (npm, mirrors).
- Dependency counters — noisy/stale. "Renovate enabled" / "Dependabot enabled" is the usable substitute.

Test: would removing this badge lose information the reader couldn't get from the page above?

## Procedure

1. Read the README. Name the actual audience.
2. **Ethos first** — for each existing section, name the reader need it
   serves (identify / evaluate / use / engage). Sections serving no
   need are noise; flag them to cut, even if the checklist nominally
   has a slot. "What it's made of" tours, internal implementation
   notes, and speculative future plans usually fall here.
3. **Gaps** — walk the checklist to find reader needs *not yet*
   covered. The checklist is a prompt for missing needs, not a license
   for existing sections.
4. Walk the badges against the principle; flag any that don't earn
   their place.
5. Surface findings before editing. Apply only after scope is agreed.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.