
Skill Reviewer
- 927 installs
- 1.3k repo stars
- Updated August 4, 2026
- daymade/claude-code-skills
skill-reviewer is a Claude Code skill that audits custom SKILL.md files against Claude Code conventions for developers who need validated frontmatter, triggers, and structure before publishing skills.
About
skill-reviewer is a Claude Code skill that evaluates custom SKILL.md files against a published best-practices checklist before sharing or publishing. It checks YAML frontmatter rules—name max 64 characters, lowercase hyphens only, description max 1024 characters in third-person voice with trigger conditions—and reviews description quality, imperative step wording, and progressive disclosure patterns. A bundled security scan (gitleaks plus pattern validation, scanned 2026-01-15) confirms the skill content passes secret-detection gates. Developers reach for skill-reviewer when a new or edited skill needs a structured preflight audit instead of informal peer review.
- Full evaluation checklist for YAML frontmatter name and description constraints
- Third-person description and explicit “Use when…” trigger validation with worked bad/good examples
- Instruction quality checks for imperative workflow steps and checklist patterns
- Progressive disclosure review so agents load the right depth of guidance
- Documented gitleaks-style security scan metadata in the upstream skill readme
Skill Reviewer by the numbers
- 927 all-time installs (skills.sh)
- +52 installs in the week ending Aug 5, 2026 (Skillselion tracking)
- Ranked #75 of 782 Skill Development skills by installs in the Skillselion catalog
- Security screen: HIGH risk (skills.sh audit)
- Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/daymade/claude-code-skills --skill skill-reviewerAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 927 |
|---|---|
| repo stars | ★ 1.3k |
| Security audit | 1 / 3 scanners passed |
| Last updated | August 4, 2026 |
| Repository | daymade/claude-code-skills ↗ |
How do you validate a Claude Code SKILL.md?
Audit a custom SKILL.md against Claude Code conventions—frontmatter, triggers, imperative steps, and progressive disclosure—before publishing or sharing the skill.
Who is it for?
Developers authoring or maintaining Claude Code skills who want a convention checklist before release.
Skip if: General application code review or security pentests unrelated to SKILL.md structure and agent triggers.
When should I use this skill?
The user drafts or edits a SKILL.md and wants a pre-publish audit against Claude Code skill conventions.
What you get
Checklist pass/fail notes, frontmatter corrections, and trigger or structure recommendations for the skill file.
- Convention checklist results
- Frontmatter and trigger fix recommendations
By the numbers
- Enforces SKILL.md name max 64 characters and description max 1024 characters
- Security scan passed with gitleaks on 2026-01-15
Files
Skill Reviewer
Review and improve Claude Code skills against official best practices.
Setup (Auto-Install Dependencies)
Before using this skill, ensure skill-creator is installed for automated validation.
Auto-install sequence:
# 1. Check if skill-creator exists
SKILL_CREATOR=$(find ~/.claude/plugins/cache -name "skill-creator" -type d 2>/dev/null | head -1)
# 2. If not found, install it
if [ -z "$SKILL_CREATOR" ]; then
claude plugin marketplace add https://github.com/daymade/claude-code-skills
claude plugin install skill-creator@daymade-skills
SKILL_CREATOR=$(find ~/.claude/plugins/cache -name "skill-creator" -type d 2>/dev/null | head -1)
fi
echo "skill-creator location: $SKILL_CREATOR"Three Modes
Mode 1: Self-Review
Check your own skill before publishing.
Automated validation (run after setup):
# Quick validation
python3 "$SKILL_CREATOR"/*/quick_validate.py <target-skill>
# Security scan
python3 "$SKILL_CREATOR"/*/security_scan.py <target-skill> --verboseManual evaluation: See references/evaluation_checklist.md.
Mode 2: External Review
Evaluate someone else's skill repository.
Review Workflow:
- [ ] Clone repository to /tmp/
- [ ] Read ALL documentation first
- [ ] Identify author's intent
- [ ] Run evaluation checklist
- [ ] Generate improvement reportMode 3: Auto-PR
Fork, improve, and submit PR to external skill repository.
Auto-PR Workflow:
- [ ] Fork repository (gh repo fork)
- [ ] Create feature branch
- [ ] Apply additive improvements only
- [ ] Self-review: respect check passed?
- [ ] Create PR with detailed explanationEvaluation Checklist (Quick)
| Category | Check | Status |
|---|---|---|
| Frontmatter | name present? | |
| description present? | ||
| description in third-person? | ||
| includes trigger conditions? | ||
| Instructions | imperative form? | |
| under 500 lines? | ||
| workflow pattern? | ||
| Resources | no hardcoded paths? | |
| scripts have error handling? |
Full checklist: references/evaluation_checklist.md
Core Principle: Additive Only
When improving external skills, NEVER:
- Delete existing files
- Remove functionality
- Change primary language
- Rename components
ALWAYS:
- Add new capabilities
- Preserve original content
- Explain every change
❌ "Removed metadata.json (non-standard)"
✅ "Added marketplace.json (metadata.json preserved)"
❌ "Rewrote README in English"
✅ "Added README.en.md (Chinese preserved as default)"Common Issues & Fixes
Issue: Description Not Third-Person
# Before
description: Browse YouTube videos and summarize them.
# After
description: Browses YouTube videos and generates summaries. Use when...Issue: Missing Trigger Conditions
# Before
description: Processes PDF files.
# After
description: Extracts text from PDFs. Use when working with PDF files or when the user mentions PDFs, forms, or document extraction.Issue: No Workflow Pattern
Add checklist for complex tasks:
## Workflow
Copy this checklist:
\`\`\`
Task Progress:
- [ ] Step 1: ...
- [ ] Step 2: ...
\`\`\`Issue: Missing Marketplace Support
Adding or validating marketplace.json (plugin boundaries, source/skills layout, whether skills are independently toggleable) is the marketplace-dev skill's domain — don't author it from a template here. Ensure marketplace-dev is available (auto-install it if missing), then follow its workflow and references/cache_and_source_patterns.md.
PR Guidelines
When submitting PRs to external repos:
Tone
❌ "Your skill doesn't follow best practices"
✅ "This PR aligns with best practices for better discoverability"
❌ "Fixed the incorrect description"
✅ "Improved description with trigger conditions"Required Sections
1. Summary - What this PR does 2. What's NOT Changed - Show respect for original 3. Rationale - Why each change helps 4. Test Plan - How to verify
Template: references/pr_template.md
Self-Review Checklist
Before submitting any PR:
Respect Check:
- [ ] No files deleted?
- [ ] No functionality removed?
- [ ] Original language preserved?
- [ ] Author's design decisions respected?
- [ ] All changes are additive?
- [ ] PR explains the "why"?References
references/evaluation_checklist.md- Full evaluation checklistreferences/pr_template.md- PR description template- Best practices: https://platform.claude.com/docs/en/agents-and-tools/agent-skills/best-practices
Security scan passed
Scanned at: 2026-01-15T23:00:17.123502
Tool: gitleaks + pattern-based validation
Content hash: 0c696633f662b65e56b69a2c88a8fadd5fa5a501d1832a47d81201fc4a1fa097
Skill Evaluation Checklist
Complete checklist for evaluating Claude Code skills against best practices.
YAML Frontmatter
- [ ]
namefield present and valid - Max 64 characters
- Lowercase letters, numbers, hyphens only
- No reserved words (anthropic, claude)
- [ ]
descriptionfield present and valid - Non-empty
- Max 1024 characters
- Third-person voice
- Includes trigger conditions ("Use when...")
Description Quality
Third-Person Voice Check
❌ "Browse YouTube videos..."
❌ "You can use this to..."
❌ "I can help you..."
✅ "Browses YouTube videos..."
✅ "This skill processes..."Trigger Conditions Check
Description should include:
- What the skill does
- When to use it
- Specific triggers (file types, keywords, scenarios)
❌ "Processes PDFs"
✅ "Extracts text and tables from PDF files. Use when working with PDF files or when the user mentions PDFs, forms, or document extraction."Instruction Quality
- [ ] Imperative/infinitive form used (verb-first)
- [ ] Concise (avoid obvious explanations)
- [ ] Clear workflow steps
- [ ] Checklist pattern for complex tasks
Imperative Form Check
❌ "You should run the script..."
❌ "The user can configure..."
✅ "Run the script..."
✅ "Configure by editing..."Progressive Disclosure
- [ ] SKILL.md body under 500 lines
- [ ] Detailed content in
references/ - [ ] Large files include grep patterns
- [ ] No duplication between SKILL.md and references
Bundled Resources
Scripts (scripts/)
- [ ] Executable with proper shebang
- [ ] Explicit error handling (no bare except)
- [ ] Clear documentation
- [ ] No hardcoded secrets
References (references/)
- [ ] Self-explanatory filenames
- [ ] Loaded as needed, not always
- [ ] No duplication with SKILL.md
Assets (assets/)
- [ ] Used in output, not loaded into context
- [ ] Templates, images, boilerplate
Privacy and Paths
- [ ] No absolute user paths (
/Users/username/) - [ ] No personal/company names
- [ ] No hardcoded secrets
- [ ] Relative paths only
Workflow Pattern
- [ ] Clear sequential steps
- [ ] Copy-paste checklist provided
- [ ] Validation/verification steps included
Error Handling
- [ ] Scripts have specific exception types
- [ ] Error messages are helpful
- [ ] Recovery paths documented
Summary Table
| Category | Status | Notes |
|---|---|---|
| Frontmatter | ||
| Description | ||
| Instructions | ||
| Progressive Disclosure | ||
| Resources | ||
| Privacy | ||
| Workflow | ||
| Error Handling |
PR Template for Skill Contributions
Use this template when creating PRs for Claude Code skill repositories.
PR Title Format
refactor: Align skill with Claude Code best practicesOr for specific improvements:
feat: Add marketplace support for plugin installation
docs: Add bilingual documentation (English/Chinese)
fix: Improve error handling in scriptsPR Body Template
## Summary
This PR improves the [skill-name] skill by aligning it with [Claude Code Skill Best Practices](https://platform.claude.com/docs/en/agents-and-tools/agent-skills/best-practices).
### What This PR Does
- [Improvement 1]
- [Improvement 2]
- [Improvement 3]
### What This PR Does NOT Change
- [Preserved item 1]
- [Preserved item 2]
## Detailed Changes
### 1. [Change Category]
**Before:**
[Description of current state]
**After:**
[Description of improvement]
**Rationale:**
[Why this change helps users]
### 2. [Change Category]
...
## Why These Changes?
According to Claude Code best practices:
> "[Quote from documentation]"
This PR addresses:
- [Issue 1 and how it's fixed]
- [Issue 2 and how it's fixed]
## Files Changed
| File | Change Type | Description |
|------|-------------|-------------|
| SKILL.md | Modified | Improved description and workflow |
| README.md | Modified | Added installation instructions |
| README.en.md | Added | English documentation |
| .claude-plugin/marketplace.json | Added | Plugin marketplace support |
## Test Plan
- [ ] Test 1
- [ ] Test 2
- [ ] Test 3
## References
- [Claude Code Skill Best Practices](https://platform.claude.com/docs/en/agents-and-tools/agent-skills/best-practices)
- [Skills Overview](https://platform.claude.com/docs/en/agents-and-tools/agent-skills/overview)
---
🤖 Generated with [Claude Code](https://claude.com/claude-code)Key Sections Explained
Summary
- Brief overview (2-3 sentences)
- Link to best practices
What This PR Does NOT Change
CRITICAL - Always include this section to show respect for original work.
Rationale
- Explain WHY each change helps
- Quote official documentation
- Don't be judgmental
Test Plan
- Provide actionable verification steps
- Help maintainers review quickly
Tone Guidelines
Do
- Be helpful and constructive
- Explain benefits to users
- Acknowledge good aspects of original
Don't
- Be critical or judgmental
- Imply the original is "wrong"
- Use words like "fix", "correct", "proper" negatively
Examples
❌ "Fixed the incorrect description format"
✅ "Improved description for better skill discovery"
❌ "The skill had several issues..."
✅ "This PR adds improvements for..."
❌ "Corrected the non-standard structure"
✅ "Added marketplace support for easier installation"Related skills
How it compares
Use skill-reviewer for SKILL.md convention audits; use code-review skills for application logic and pull-request diffs.
FAQ
What frontmatter limits does skill-reviewer enforce?
skill-reviewer enforces Claude Code frontmatter limits: the name field max 64 lowercase hyphenated characters, and the description field max 1024 characters in third-person voice with explicit trigger conditions.
Does skill-reviewer scan for secrets?
skill-reviewer bundles a gitleaks plus pattern-based security scan that passed on 2026-01-15, helping authors confirm SKILL.md content and examples do not leak credentials before publishing.
Is Skill Reviewer safe to install?
skills.sh reports 1 of 3 security scanners passed. Review the Security Audits panel on this page before installing in production.