skill-audit

Scan SKILL.md files and report specification conformance and security issues.

55|4|Updated Feb 5, 2026
One-click install
npx skills add https://github.com/bug-ops/zeph --skill skill-audit-bug-ops
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: skill-audit
Source: https://github.com/bug-ops/zeph/tree/main/.zeph/skills/skill-audit
Command: npx skills add https://github.com/bug-ops/zeph --skill skill-audit-bug-ops

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit installed skills for agentskills.io specification compliance and security issues, enabling teams to identify gaps, enforce safety, and improve overall skill quality.

Core Features & Use Cases

  • Checks each skill's SKILL.md for required fields (name, description) and validates spec conformance.
  • Aggregates a list of non-compliant skills, highlights security risks, and provides actionable remediation steps.
  • Use Case: perform a periodic audit of all installed skills when onboarding new capabilities or conducting security reviews.

Quick Start

Run the audit command to scan your skills directory and generate a report.

Frequently Asked Questions about skill-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit installed skills for spec compliance and security risks?▼

Auditing installed skills involves scanning SKILL.md files to validate required fields and check for security issues. The process outputs a formal report detailing spec adherence, security risks, and recommended remediation steps.

What is a SKILL.md compliance audit and when do I need one?▼

A SKILL.md compliance audit is a structured validation of installed skills against specification requirements and safety standards. You need it when onboarding new capabilities or conducting periodic security reviews of your skills library.

How do I generate a security and compliance report for my skills library?▼

Generate a compliance report by running an audit scan across your entire skills library. The audit evaluates problem scope and requirements, outputting a formal report with spec adherence details and actionable remediation steps.

Can I scan a specific skill instead of auditing the entire skills library?▼

Yes, the audit workflow supports both the entire Zeph skills library and specific skill audits. You can target an individual skill to perform a structured compliance check and receive a focused report on its spec adherence and security risks.

What security risks are identified during a skills audit?▼

A skills audit identifies security risks by scanning SKILL.md files for safety issues and specification non-conformance. It aggregates non-compliant skills, highlights the specific risks found, and provides actionable remediation steps to enforce safety.