audit-skill

Audit skillsets for structural readiness, safety posture, and workflow provenance.

6|2|Updated Jan 30, 2026
One-click install
npx skills add https://github.com/skillsets-cc/main --skill audit-skill-skillsets-cc
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: audit-skill
Source: https://github.com/skillsets-cc/main/tree/main/tools/audit-skill
Command: npx skills add https://github.com/skillsets-cc/main --skill audit-skill-skillsets-cc

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Reviewers need a structured, reproducible audit of skillsets, including manifest validity, MCP server configurations, runtime dependencies, and workflow artifacts, to ensure safety and readiness for publication.

Core Features & Use Cases

  • Validate tier 1 readiness and structural conformance
  • Discover and evaluate MCP servers, dependencies, and CC extensions
  • Compare artifacts in the reference repo to claimed workflows and generate audit notes

Quick Start

Run the audit tool against your reference repository to generate AUDIT_REPORT.md and start the validation workflow.

Frequently Asked Questions about audit-skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a skill submission for safety and structural readiness?

Skill audits require a production repository containing the skill's manifest, MCP server configurations, runtime dependencies, and reference artifacts to validate structural conformance and safety posture.

What is included in an MCP server configuration and dependency audit?

An MCP server configuration and dependency audit discovers and evaluates MCP servers, runtime dependencies, and CC extensions, comparing them to claimed workflows to generate structured compliance data and remediation notes.

How do I validate tier 1 readiness for skillset publication?

Validate tier 1 readiness by auditing structural conformance, safety posture, and workflow provenance, producing an AUDIT_REPORT.md to start the validation workflow.

Can I generate structured compliance data from a skill manifest audit?

Yes, auditing a skill manifest produces structured data on compliance alongside an evaluative narrative, providing explicit recommendations and risk notes for remediation.

What limitations exist when auditing workflow provenance in a reference repo?

Auditing workflow provenance is limited to comparing artifacts in the provided production repository against claimed workflows, meaning incomplete or missing reference artifacts will constrain the resulting compliance assessment.