skills-governance

You can identify duplicate agent skills by running a filesystem-backed inventory that recursively discovers directories containing SKILL.md frontmatter. It groups skills by name, ranks candidates by source priority, and recommends whether to keep, disable, or archive each copy.

Auditing Codex skills involves cross-root scanning across Codex, agents, and plugin roots to honor skills.config entries and frontmatter disable flags. It flags suspicious plugin-import or backup-like entries and outputs markdown and JSON reports for change planning.

To generate a JSON or markdown inventory, run a scan that extracts SKILL.md frontmatter from discovered skill directories. This produces machine-readable JSON and human-readable markdown reports suitable for tracking audits and planning changes.

No, you do not need external dependencies to scan local skill collections. The audit operates without external dependencies by reading the filesystem, extracting SKILL.md frontmatter, and respecting local skills.config entries and disable flags.

Skills are flagged as suspicious during an audit when they exhibit plugin-import or backup-like characteristics. The scan identifies these entries across Codex and adjacent agent skill roots to help you declutter stale or imported copies.