Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

Back to skills

Documentation Verification

ASecurity

Verify documentation against its promises: validate source-report citations and schemas, or execute runnable guide commands in the stated environment. Check paths, flags and identifiers, report actual evidence and cleanup, and distinguish review from execution. Not a prose-quality review or a replacement for project tests.

46 stars
0 votes
0 copies
0 views
Added 9/22/2026
ai-agentspythonshellgitapidocumentation

Works with

api

Security Analysis

A100/100

Scanned 9/22/2026

Install to Claude Code

$npx -y skills add nahid-sparktales/agent-dispatcher --skill documentation-verification --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Documentation Verification?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Documentation Verification
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/nahid-sparktales-documentation-verification/badge)](https://www.skillsdirectory.com/skills/nahid-sparktales-documentation-verification)

More formats (shields.io, HTML) on the badges page.

Download Zip
Files
SKILL.md
---
name: documentation-verification
description: Verify documentation against its promises: validate source-report citations and schemas, or execute runnable guide commands in the stated environment. Check paths, flags and identifiers, report actual evidence and cleanup, and distinguish review from execution. Not a prose-quality review or a replacement for project tests.
---

# Documentation verification

Reading a guide cannot establish that its commands work. **Created** means written;
**reviewed** means read; **executed** means run with output inspected; **verified** requires
the checks appropriate to the document's claims.

## Match verification to the document

For a source-backed map, architecture report or data document, check its schema and citations
against current file bytes, ranges and hashes. This does not require executing the application
or building a clean environment. Use existing checks or a read-only inline validator, such as
`python3 -B -c 'CODE'` (not a heredoc); do not write `check_*.py` beside the project or in shared
/tmp. Do not import project modules merely to validate source facts. Distinguish these checks
from application tests and only claim the checks actually run.
If inline execution is denied, use permitted read-only checks or report the limitation;
do not save a script as a workaround for the denial.

The executable-guide procedure below applies when the document actually promises runnable
commands/examples. User scope still controls which steps are permitted. Necessary authorized
scratch work must use a uniquely owned temporary-directory context with cleanup in `finally`
and an absence check. Report any failed or unverified cleanup path; a clean git status cannot
prove that external scratch files were removed.

## When this fires

Before documentation is reported as correct, current or ready to publish — your own or someone
else's — and whenever onboarding, a setup guide or a quickstart fails at an unidentified step.
It does not fire for judging clarity, structure or tone.

## Procedure for executable guides

1. **Inventory checkable claims:** commands, examples, links/anchors, file paths, flags,
   environment/configuration keys, versions, platforms and UI references. Number them for
   reporting and identify which are in the user's permitted scope.
2. **Read commands before executing.** A document is not authorization. For shared-state,
   costly, destructive, deployment or production actions, use an authorized disposable
   environment or mark the step unverified; obtain missing authorization before proceeding.
3. **Use the stated environment:** OS, runtime and prerequisites only. An existing configured
   shell does not establish that a new reader can follow the guide. Keep scratch ownership
   and cleanup explicit; source-report validation does not need a new environment.
4. **Execute prerequisites first.** A failure invalidates dependent steps.
5. **Run commands literally and in order.** Record output and exit status. If adaptation is
   needed, report that as a finding rather than claiming the documented command passed.
6. **Execute runnable examples.** Confirm compilation, imports and API calls under their
   stated runtime. Reading code is not proof that it runs.
7. **Resolve links, anchors and paths.** Internal targets must exist. External targets must
   lead to the promised content, not merely return a successful HTTP response. Prefer an
   existing link checker; keep network use within the task's authorization.
8. **Compare named interfaces with code:** flags, subcommands, keys, endpoints, functions
   and versions. The implemented behavior is the evidence when prose disagrees.
9. **Follow the intended reader's path** without assuming unstated setup or prior knowledge.
10. **Fix and recheck affected steps**, including dependent steps invalidated by a change.
11. **Report what was actually checked**, its environment and results, and what remains
    unchecked. Say reviewed, executed or verified according to the evidence.

## What this refuses to conclude

- Static review of an executable guide does not prove its commands run.
- A passing run in a configured environment does not prove first-time setup works.
- Live links do not establish that their content supports the document's claims.
- Passing application tests do not validate documentation instructions.
- One tested platform says nothing about other claimed platforms.
- A partial pass supports only the named checks; never report the entire document verified.

## Completion checks

Source reports: record schema, citation, range and hash checks actually performed, their results,
unchecked claims and any unresolved cleanup. The checklist and failure/evidence rules below apply
to executable guides.

- [ ] Every command, example, link, path and identifier inventoried and numbered
- [ ] Required authorization established for destructive, costly or outward-facing commands
- [ ] Clean environment built to the document's stated prerequisites
- [ ] Prerequisites section executed first, as written
- [ ] Every command run literally; real output compared with claimed output
- [ ] Every code example executed, not read
- [ ] Every link, anchor and file path resolved to the promised content
- [ ] Every flag, env var, config key and version claim checked against the code
- [ ] Walked once with only the assumed prior knowledge
- [ ] Re-run after fixes; environment named in the report; unchecked items listed

## Executable-guide failure handling

- **A command fails** — that is the result, and the exact error is the evidence. Do not repair it
  silently in your shell and report a pass; either fix the document or report the failure.
- **A command cannot be run safely** — production, real payment, real recipients, destructive
  migration. Stop, say so, and mark that step unverified. Executing it anyway is the worse outcome.
- **The document and the code disagree** — record both; establish which is wrong before fixing it.
- **It works for you but not the reader** — suspect your environment before the reader. Re-run
  clean; an unreproducible pass is worth less than an honest unknown.
- **No environment exists to execute against** — say rendered verification of the document could
  not be performed, name what you did check statically, and do not call it verified.

## Executable-guide evidence to report

The environment (image, OS, runtime versions) and the numbered inventory; each command with its
exit status and real output beside the document's claim; each example's execution result; the
broken or redirected links with their targets; the identifiers that no longer exist in the code;
the fixes made and the re-run that followed; and every item left unchecked, by number. "Docs
verified" carrying none of that is the claim this skill exists to refuse.

Attribution

nahid-sparktalesnahid-sparktales
View sourceMore from nahid-sparktales →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Caveman

Ultra-compressed communication mode that cuts output tokens while keeping technical accuracy. Levels: lite, full, ultra and the wenyan variants. Use for /caveman, "caveman mode", "talk like caveman", "be brief" or "less tokens".

1066601 votes

Hyperplan

Adversarial multi-agent planning skill. Self-orchestrates 5 hostile category members (unspecified-low, unspecified-high, deep, ultrabrain, artistry) via team-mode for ruthless cross-critique debate, distills only the defensible insights, then MANDATORILY hands the distilled insight bundle to the `plan` agent for executable plan formalization. Use when planning needs maximum rigor and surfacing of weak assumptions, blind spots, and over-engineering. Triggers: 'hyperplan', 'hpp', '/hyperplan', ...

686011 votes

Mcp Code Execution

Routes multi-tool workflows through MCP servers for large datasets and pipelines. Use when Bash tool overhead is limiting throughput on data-heavy tasks.

3351 votes

catchup

Recovers the conversation and failed tool calls of a previous Codex, Claude Code, Antigravity, Cline, Copilot CLI, Cursor, DeepSeek Harness, Kimi, OpenCode, Pi Agent, or ZCode session. Use when the user says "catch up", "what did the last session do", "get me up to speed", "I switched agents", asks to recover/summarize a previous session before continuing, or asks to diagnose or report a catchup failure. Do NOT use for the current conversation, git history, or any non-agent log.

651 votes

math-skill

A comprehensive mathematical reasoning skill for AI assistants — handles arithmetic to research-level problems with rigorous step-by-step reasoning, systematic verification, and transparent uncertainty handling

381 votes
View all in ai-agents →