Now liveThe Skillselion MCP - thousands of ranked skills, loaded into your agent mid-task. No install.Get it →
shipshitdev avatar

Skill Auditor

  • 34 installs
  • 31 repo stars
  • Updated August 2, 2026
  • shipshitdev/library

Helps with security tasks.

About

skill-auditor is a Claude Code skill for security. It helps solo builders move faster with AI-assisted development.

  • skill-auditor
  • Security
  • AI-coding skill

Skill Auditor by the numbers

  • 34 all-time installs (skills.sh)
  • Ranked #1,462 of 2,203 Security skills by installs in the Skillselion catalog
  • Data as of Aug 3, 2026 (Skillselion catalog sync)
npx skills add https://github.com/shipshitdev/library --skill skill-auditor

Add your badge

Show developers this skill is listed on Skillselion. Paste this into your README.

Listed on Skillselion
Installs34
repo stars31
Last updatedAugust 2, 2026
Repositoryshipshitdev/library

What it does

Helps with security tasks.

Files

SKILL.mdMarkdownGitHub ↗

Skill Auditor

Comprehensive audit of the skills library for quality and consistency.

Audit Categories

1. Duplicate Detection

Find skills that overlap and should be consolidated:

  • Compare descriptions for semantic similarity
  • Check for skills with near-identical when_to_use triggers
  • Flag naming collisions (e.g., react-patterns vs react-refactor)

2. Spec Compliance

For each SKILL.md, check:

  • Frontmatter follows Agent Skills spec (see .agents/memory/system/skill-standards.md)
  • version/tags inside metadata: block, not top-level
  • No forbidden fields (auto_activate, auto_trigger, risk)
  • metadata.tags is a comma-separated string, not YAML list

3. Structural Issues

  • Orphaned nested directories (skills/<name>/<name>/)
  • Empty skill directories (no SKILL.md)
  • Skills in README that no longer exist in filesystem
  • Skills in filesystem that are missing from README
  • Broken references to non-existent files in skill content

4. Content Quality

  • Empty or placeholder descriptions
  • Hardcoded project-specific paths (/workspace/, @genfeedai/)
  • Escaped backtick fences (\\\`) instead of real fences
  • Skills that reference scripts not bundled with the skill

5. README Sync

Compare skills/ directory listing against README.md skills table:

# Get skills from filesystem
find skills -maxdepth 1 -mindepth 1 -type d | sed 's|skills/||' | sort > /tmp/fs-skills.txt

# Get skills from README table
grep -oE '\[([a-z0-9-]+)\]\(https://skills\.sh' README.md | sed 's/\[//' | sed 's/\](https:\/\/skills\.sh//' | sort > /tmp/readme-skills.txt

# Diff
comm -23 /tmp/fs-skills.txt /tmp/readme-skills.txt  # in fs, not README
comm -13 /tmp/fs-skills.txt /tmp/readme-skills.txt  # in README, not fs

Output Format

Report findings as a table:

SkillIssueSeverityAction
code-refactoring-refactor-cleanDuplicate of refactor-codeHIGHMerge
spec-to-code-complianceEmpty directoryHIGHDelete
skill-capturetags as YAML listMEDIUMFix to string

Related skills

Securityappsec

This week in AI coding

Five minutes, every Monday - the tools, releases and tactics for developers.

unsubscribe anytime.