skill-audit

Scan SKILL.md files and report specification conformance and security issues.

55|4|Updated Feb 5, 2026
One-click install
npx skills add https://github.com/bug-ops/zeph --skill skill-audit-bug-ops
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: skill-audit
Source: https://github.com/bug-ops/zeph/tree/main/.zeph/skills/skill-audit
Command: npx skills add https://github.com/bug-ops/zeph --skill skill-audit-bug-ops

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit installed skills for agentskills.io specification compliance and security issues, enabling teams to identify gaps, enforce safety, and improve overall skill quality.

Core Features & Use Cases

  • Checks each skill's SKILL.md for required fields (name, description) and validates spec conformance.
  • Aggregates a list of non-compliant skills, highlights security risks, and provides actionable remediation steps.
  • Use Case: perform a periodic audit of all installed skills when onboarding new capabilities or conducting security reviews.

Quick Start

Run the audit command to scan your skills directory and generate a report.

Frequently Asked Questions about skill-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit installed skills for spec compliance and security risks?

Auditing installed skills involves scanning SKILL.md files to validate required fields and check for security issues. The process outputs a formal report detailing spec adherence, security risks, and recommended remediation steps.

What is a SKILL.md compliance audit and when do I need one?

A SKILL.md compliance audit is a structured validation of installed skills against specification requirements and safety standards. You need it when onboarding new capabilities or conducting periodic security reviews of your skills library.

How do I generate a security and compliance report for my skills library?

Generate a compliance report by running an audit scan across your entire skills library. The audit evaluates problem scope and requirements, outputting a formal report with spec adherence details and actionable remediation steps.

Can I scan a specific skill instead of auditing the entire skills library?

Yes, the audit workflow supports both the entire Zeph skills library and specific skill audits. You can target an individual skill to perform a structured compliance check and receive a focused report on its spec adherence and security risks.

What security risks are identified during a skills audit?

A skills audit identifies security risks by scanning SKILL.md files for safety issues and specification non-conformance. It aggregates non-compliant skills, highlights the specific risks found, and provides actionable remediation steps to enforce safety.