synthos-skill-audit

Audit AI skill files against the Synthos five-section standard with privacy scanning.

6|1|Updated May 11, 2026
One-click install
npx skills add https://github.com/yakeworld/Synthos --skill synthos-skill-audit-yakeworld
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: synthos-skill-audit
Source: https://github.com/yakeworld/Synthos/tree/main/skills/private/synthos-skill-audit
Command: npx skills add https://github.com/yakeworld/Synthos --skill synthos-skill-audit-yakeworld

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Teams generating AI skills with tools like /learn need a consistent way to verify those skills conform to the Synthos five-section standard, contain no leaked credentials, and migrate cleanly across a dual-repository architecture. This Skill automates that audit so non-conforming or unsafe skills are caught before deployment. ## Core Features & Use Cases - Four-block to five-section mapping: Maps /learn-generated skill blocks (思想/原理/流程/方法) to the Synthos five-section method and records invocation hierarchy differences (P2 vs P0-P1). - Privacy scan grading: Greps skill content for API keys, tokens, and passwords, then remediates findings via environment-variable substitution and re-scans. - Path trap and dual-repo audit: Detects broken symlinks, repairs permissions, and verifies migration coverage across skills/private/ and skills/ directories. - Use Case: Given three private skills pending migration, produce a coverage report showing 2/3 migrated, one blocked by a hardcoded API key with the exact grep location and remediation steps. ## Quick Start Audit the /learn-generated xhs-content skill against the Synthos five-section standard and report mapping results, hierarchy differences, and privacy scan findings.

Frequently Asked Questions about synthos-skill-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a /learn-generated skill against the Synthos standard?▼

Provide the /learn-generated skill file plus a Synthos standard skill as the reference. The audit maps the four blocks (思想, 原理, 流程, 方法) to the five sections and records the invocation hierarchy difference between P2 and P0-P1 skills.

How does the privacy scan detect leaked credentials in skill files?▼

The scan greps skill content for patterns such as API Key, Token, password, secret, and Bearer. Detected credentials are remediated via environment variable substitution, then a re-scan confirms zero residual credentials.

What is the four-block to five-section mapping in skill audits?▼

The mapping pairs 思想 with Principles, 原理 with core principles, 流程 with the Verification checklist, and 方法 with the Golden Set. This produces a section-by-section conformance table for /learn-generated skills.

Can this audit handle dual-repository skill migration?▼

Yes, it covers both skills/private/ and skills/ directories, checks migration status completeness, and blocks migration of skills containing hardcoded credentials until remediation passes a re-scan.

Why does a zero-credential scan result require re-verification?▼

A zero finding can be a false negative if the scan did not cover the entire file. The audit re-verifies scan coverage before reporting a pass, per the SYNT-005 check and the credential-handling principle.