synthos-skill-audit

Audit AI skill files against the Synthos five-section standard with privacy scanning.

6|1|Updated May 11, 2026
One-click install
npx skills add https://github.com/yakeworld/Synthos --skill synthos-skill-audit-yakeworld
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: synthos-skill-audit
Source: https://github.com/yakeworld/Synthos/tree/main/skills/private/synthos-skill-audit
Command: npx skills add https://github.com/yakeworld/Synthos --skill synthos-skill-audit-yakeworld

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Teams generating AI skills with tools like /learn need a consistent way to verify those skills conform to the Synthos five-section standard, contain no leaked credentials, and migrate cleanly across a dual-repository architecture. This Skill automates that audit so non-conforming or unsafe skills are caught before deployment. ## Core Features & Use Cases - Four-block to five-section mapping: Maps /learn-generated skill blocks (思想/原理/流程/方法) to the Synthos five-section method and records invocation hierarchy differences (P2 vs P0-P1). - Privacy scan grading: Greps skill content for API keys, tokens, and passwords, then remediates findings via environment-variable substitution and re-scans. - Path trap and dual-repo audit: Detects broken symlinks, repairs permissions, and verifies migration coverage across skills/private/ and skills/ directories. - Use Case: Given three private skills pending migration, produce a coverage report showing 2/3 migrated, one blocked by a hardcoded API key with the exact grep location and remediation steps. ## Quick Start Audit the /learn-generated xhs-content skill against the Synthos five-section standard and report mapping results, hierarchy differences, and privacy scan findings.

Frequently Asked Questions about synthos-skill-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit a /learn-generated skill against the Synthos standard?

Provide the /learn-generated skill file plus a Synthos standard skill as the reference. The audit maps the four blocks (思想, 原理, 流程, 方法) to the five sections and records the invocation hierarchy difference between P2 and P0-P1 skills.

How does the privacy scan detect leaked credentials in skill files?

The scan greps skill content for patterns such as API Key, Token, password, secret, and Bearer. Detected credentials are remediated via environment variable substitution, then a re-scan confirms zero residual credentials.

What is the four-block to five-section mapping in skill audits?

The mapping pairs 思想 with Principles, 原理 with core principles, 流程 with the Verification checklist, and 方法 with the Golden Set. This produces a section-by-section conformance table for /learn-generated skills.

Can this audit handle dual-repository skill migration?

Yes, it covers both skills/private/ and skills/ directories, checks migration status completeness, and blocks migration of skills containing hardcoded credentials until remediation passes a re-scan.

Why does a zero-credential scan result require re-verification?

A zero finding can be a false negative if the scan did not cover the entire file. The audit re-verifies scan coverage before reporting a pass, per the SYNT-005 check and the credential-handling principle.