Now liveThe Skillselion MCP - thousands of ranked skills, loaded into your agent mid-task. No install.Get it →
daymade avatar

Skill Reviewer

  • 927 installs
  • 1.3k repo stars
  • Updated August 4, 2026
  • daymade/claude-code-skills

skill-reviewer is a Claude Code skill that audits custom SKILL.md files against Claude Code conventions for developers who need validated frontmatter, triggers, and structure before publishing skills.

About

skill-reviewer is a Claude Code skill that evaluates custom SKILL.md files against a published best-practices checklist before sharing or publishing. It checks YAML frontmatter rules—name max 64 characters, lowercase hyphens only, description max 1024 characters in third-person voice with trigger conditions—and reviews description quality, imperative step wording, and progressive disclosure patterns. A bundled security scan (gitleaks plus pattern validation, scanned 2026-01-15) confirms the skill content passes secret-detection gates. Developers reach for skill-reviewer when a new or edited skill needs a structured preflight audit instead of informal peer review.

  • Full evaluation checklist for YAML frontmatter name and description constraints
  • Third-person description and explicit “Use when…” trigger validation with worked bad/good examples
  • Instruction quality checks for imperative workflow steps and checklist patterns
  • Progressive disclosure review so agents load the right depth of guidance
  • Documented gitleaks-style security scan metadata in the upstream skill readme

Skill Reviewer by the numbers

  • 927 all-time installs (skills.sh)
  • +52 installs in the week ending Aug 5, 2026 (Skillselion tracking)
  • Ranked #75 of 782 Skill Development skills by installs in the Skillselion catalog
  • Security screen: HIGH risk (skills.sh audit)
  • Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/daymade/claude-code-skills --skill skill-reviewer

Add your badge

Show developers this skill is listed on Skillselion. Paste this into your README.

Listed on Skillselion
Installs927
repo stars1.3k
Security audit1 / 3 scanners passed
Last updatedAugust 4, 2026
Repositorydaymade/claude-code-skills

How do you validate a Claude Code SKILL.md?

Audit a custom SKILL.md against Claude Code conventions—frontmatter, triggers, imperative steps, and progressive disclosure—before publishing or sharing the skill.

Who is it for?

Developers authoring or maintaining Claude Code skills who want a convention checklist before release.

Skip if: General application code review or security pentests unrelated to SKILL.md structure and agent triggers.

When should I use this skill?

The user drafts or edits a SKILL.md and wants a pre-publish audit against Claude Code skill conventions.

What you get

Checklist pass/fail notes, frontmatter corrections, and trigger or structure recommendations for the skill file.

  • Convention checklist results
  • Frontmatter and trigger fix recommendations

By the numbers

  • Enforces SKILL.md name max 64 characters and description max 1024 characters
  • Security scan passed with gitleaks on 2026-01-15

Files

SKILL.mdMarkdownGitHub ↗

Skill Reviewer

Review and improve Claude Code skills against official best practices.

Setup (Auto-Install Dependencies)

Before using this skill, ensure skill-creator is installed for automated validation.

Auto-install sequence:

# 1. Check if skill-creator exists
SKILL_CREATOR=$(find ~/.claude/plugins/cache -name "skill-creator" -type d 2>/dev/null | head -1)

# 2. If not found, install it
if [ -z "$SKILL_CREATOR" ]; then
  claude plugin marketplace add https://github.com/daymade/claude-code-skills
  claude plugin install skill-creator@daymade-skills
  SKILL_CREATOR=$(find ~/.claude/plugins/cache -name "skill-creator" -type d 2>/dev/null | head -1)
fi

echo "skill-creator location: $SKILL_CREATOR"

Three Modes

Mode 1: Self-Review

Check your own skill before publishing.

Automated validation (run after setup):

# Quick validation
python3 "$SKILL_CREATOR"/*/quick_validate.py <target-skill>

# Security scan
python3 "$SKILL_CREATOR"/*/security_scan.py <target-skill> --verbose

Manual evaluation: See references/evaluation_checklist.md.

Mode 2: External Review

Evaluate someone else's skill repository.

Review Workflow:
- [ ] Clone repository to /tmp/
- [ ] Read ALL documentation first
- [ ] Identify author's intent
- [ ] Run evaluation checklist
- [ ] Generate improvement report

Mode 3: Auto-PR

Fork, improve, and submit PR to external skill repository.

Auto-PR Workflow:
- [ ] Fork repository (gh repo fork)
- [ ] Create feature branch
- [ ] Apply additive improvements only
- [ ] Self-review: respect check passed?
- [ ] Create PR with detailed explanation

Evaluation Checklist (Quick)

CategoryCheckStatus
Frontmattername present?
description present?
description in third-person?
includes trigger conditions?
Instructionsimperative form?
under 500 lines?
workflow pattern?
Resourcesno hardcoded paths?
scripts have error handling?

Full checklist: references/evaluation_checklist.md

Core Principle: Additive Only

When improving external skills, NEVER:

  • Delete existing files
  • Remove functionality
  • Change primary language
  • Rename components

ALWAYS:

  • Add new capabilities
  • Preserve original content
  • Explain every change
❌ "Removed metadata.json (non-standard)"
✅ "Added marketplace.json (metadata.json preserved)"

❌ "Rewrote README in English"
✅ "Added README.en.md (Chinese preserved as default)"

Common Issues & Fixes

Issue: Description Not Third-Person

# Before
description: Browse YouTube videos and summarize them.

# After
description: Browses YouTube videos and generates summaries. Use when...

Issue: Missing Trigger Conditions

# Before
description: Processes PDF files.

# After
description: Extracts text from PDFs. Use when working with PDF files or when the user mentions PDFs, forms, or document extraction.

Issue: No Workflow Pattern

Add checklist for complex tasks:

## Workflow

Copy this checklist:

\`\`\`
Task Progress:
- [ ] Step 1: ...
- [ ] Step 2: ...
\`\`\`

Issue: Missing Marketplace Support

Adding or validating marketplace.json (plugin boundaries, source/skills layout, whether skills are independently toggleable) is the marketplace-dev skill's domain — don't author it from a template here. Ensure marketplace-dev is available (auto-install it if missing), then follow its workflow and references/cache_and_source_patterns.md.

PR Guidelines

When submitting PRs to external repos:

Tone

❌ "Your skill doesn't follow best practices"
✅ "This PR aligns with best practices for better discoverability"

❌ "Fixed the incorrect description"
✅ "Improved description with trigger conditions"

Required Sections

1. Summary - What this PR does 2. What's NOT Changed - Show respect for original 3. Rationale - Why each change helps 4. Test Plan - How to verify

Template: references/pr_template.md

Self-Review Checklist

Before submitting any PR:

Respect Check:
- [ ] No files deleted?
- [ ] No functionality removed?
- [ ] Original language preserved?
- [ ] Author's design decisions respected?
- [ ] All changes are additive?
- [ ] PR explains the "why"?

References

  • references/evaluation_checklist.md - Full evaluation checklist
  • references/pr_template.md - PR description template
  • Best practices: https://platform.claude.com/docs/en/agents-and-tools/agent-skills/best-practices

Related skills

How it compares

Use skill-reviewer for SKILL.md convention audits; use code-review skills for application logic and pull-request diffs.

FAQ

What frontmatter limits does skill-reviewer enforce?

skill-reviewer enforces Claude Code frontmatter limits: the name field max 64 lowercase hyphenated characters, and the description field max 1024 characters in third-person voice with explicit trigger conditions.

Does skill-reviewer scan for secrets?

skill-reviewer bundles a gitleaks plus pattern-based security scan that passed on 2026-01-15, helping authors confirm SKILL.md content and examples do not leak credentials before publishing.

Is Skill Reviewer safe to install?

skills.sh reports 1 of 3 security scanners passed. Review the Security Audits panel on this page before installing in production.

Skill Developmentagentsautomation

This week in AI coding

Five minutes, every Monday - the tools, releases and tactics for developers.

unsubscribe anytime.