Skip to content
Back to skills

Skill Quality Audit

ASecurity

Audit skills for correctness, freshness, and usefulness.

  • 2 stars
  • 0 votes
  • 0 copies
  • 4 views
  • Added September 10, 2026
ai-agentspythongobashdockergitapisecurity

Works with

  • cli
  • api

Security analysis

A100/100

Scanned September 10, 2026

npx -y skills add LoopyLuci/Skills --skill skill-quality-audit --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Skill Quality Audit?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Skill Quality Audit
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/loopyluci-skill-quality-audit/badge)](https://www.skillsdirectory.com/skills/loopyluci-skill-quality-audit)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: skill-quality-audit
description: Audit skills for correctness, freshness, and usefulness.
---

# Skill Quality Audit

**Trigger**: Use when reviewing a skill for correctness, checking if it's up to date, or assessing whether it's still useful.

## Audit Dimensions

```markdown
Score each dimension 1-10:

DIMENSION       | WHAT TO CHECK                  | MIN PASS
----------------|--------------------------------|---------
Accuracy        | Do the commands/APIs still work?| 7/10
Completeness    | Are all steps included?         | 6/10
Clarity         | Is the trigger obvious?         | 7/10
Conciseness     | Could it say the same in fewer? | 5/10
Freshness       | Is it updated for current tools?| 6/10
Discoverability | Would the agent find it?        | 7/10

OVERALL = average of all dimensions
PASS ≥ 6.5  |  NEEDS WORK 4-6.5  |  FAIL < 4
```

## Accuracy Check

```markdown
For each critical command in the skill:
1. Is the CLI syntax still current?
   - Check: `command --help` vs what the skill says
   - Flag: deprecated flags, renamed subcommands
2. Is the API endpoint still valid?
   - Check: current docs vs skill's URL
   - Flag: 301/404 endpoints
3. Are the package versions still supported?
   - Check: package current version vs skill's version
   - Flag: EOL versions, security vulnerabilities
```

## Freshness Check

```markdown
Check the skill version and last update:

1. Look at version in frontmatter
2. Check `.usage.json` for last_used_at
3. Check git history (if in a tap repo)
4. Test a key command

SIGNS OF STALE SKILL:
- Uses `docker-compose` (now `docker compose`)
- References `master` branch (now `main`)
- Uses Python 3.8 or older
- Dockerfile doesn't use multi-stage builds
- References deprecated cloud provider CLIs
```

## Completeness Check

```markdown
A complete skill should have:

✅ Trigger condition ("Use when...")
✅ Numbered steps
✅ Exact commands (not descriptions of commands)
✅ Pitfalls section
✅ Verification section
✅ Connected skills (if relevant)

MISSING ANY? → Flag for improvement
```

## Discoverability Check

```markdown
A discoverable skill has:

✅ Description ≤60 chars, starts with trigger
✅ Description is UNIQUE (no similar descriptions)
✅ Category matches the domain
✅ Tags are specific (not just "general")
✅ Name matches common task terminology

HARD CHECK:
  skills_list():
    Can you guess what this skill does from its description alone?
  
  If NO → description needs work.
```

## Automated Audit

```bash
#!/bin/bash
# Quick audit of all skills in a directory
SKILLS_DIR="${1:-skills}"

echo "=== Skill Audit ==="
for skill in "$SKILLS_DIR"/*/; do
    name=$(basename "$skill")
    desc=$(head -5 "$skill/SKILL.md" | grep "^description:" | cut -d: -f2- | xargs)
    desc_len=$(echo -n "$desc" | wc -c)
    has_pitfalls=$(grep -c "^## Pitfalls" "$skill/SKILL.md")
    has_verify=$(grep -c "^## Verification" "$skill/SKILL.md")
    step_count=$(grep -c "^[0-9]\. " "$skill/SKILL.md")
    
    status="✅"
    [ "$desc_len" -gt 60 ] && status="❌" && echo "  LONG DESC: $name ($desc_len chars)"
    [ "$has_pitfalls" -eq 0 ] && echo "  ⚠️  No pitfalls: $name"
    [ "$has_verify" -eq 0 ] && echo "  ⚠️  No verification: $name"
    [ "$step_count" -eq 0 ] && echo "  ⚠️  No numbered steps: $name"
done
```

## Quality Triage

```markdown
After audit, classify each issue:

CRITICAL (fix now):
- Broken commands that would fail
- Security vulnerabilities in instructions
- Incorrect API endpoints or URLs

MAJOR (fix this week):
- Missing pitfalls the user would hit
- Incomplete steps that would cause confusion
- Description >60 chars (hidden from routing)

MINOR (fix when convenient):
- Could use more examples
- Formatting improvements
- Additional reference files

TRIVIAL (maybe never):
- Extra context that's nice but not needed
- Alternative approaches that cover edge cases
```

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.