skill-security-auditor

To audit SKILL.md files for compliance, apply a line-level quality gate that validates YAML frontmatter, trigger phrases, workflow steps, scope guards, error handling, cross-references, and test coverage, producing a structured pass/fail report with required fixes.

A SKILL.md quality gate is an automated validation check that prevents low-quality or inconsistent Claude Code skills from entering a codebase by verifying YAML frontmatter fields, naming conventions, and instruction concreteness. You need it as a pre-merge validation step for new or modified skills.

You validate YAML frontmatter and trigger phrases by reading the SKILL.md file and performing line-level checks to verify required fields like name and description match the directory, and ensuring trigger phrases are specific with concrete, numbered, and bounded instructions.

Yes, you can use a skill auditor as a pre-merge quality gate to review newly authored or modified .claude/skills/*/SKILL.md files, validating their YAML frontmatter and Markdown body against a defined checklist before acceptance.

A structured pass/fail report for skill audits includes line-level findings that identify specific compliance failures, explicit required fixes to resolve issues, and recommendations to guide authors in improving trigger phrases, workflow steps, and error handling.

Your SKILL.md audit fails on naming when YAML frontmatter fields do not match the directory name, and fails on workflow steps when instructions lack concrete, numbered, and bounded steps, requiring you to revise both to pass the quality gate checklist.