Poor
0 critical
10 warnings
7 suggestions
92 passed
Domain scores
Anti-Slop
100
Accessibility
100
Enterprise
100
Issues
Warnings (10)
16.2-no-guardrailsline 11
Skill uses Bash or destructive operations without safety guardrails
Fix: Add guardrails: specify forbidden commands, require confirmation for destructive actions, or use --dry-run patterns
4.5-desc-no-triggersline 2
Description lacks triggering conditions
Fix: Add phrases like 'Use when...', 'Triggers on...', or 'Applies to...' to help Claude select this skill
1.2-desc-whatline 3
Description missing WHAT clause (action verb) - recommended by agentskills spec
Fix: Consider starting with what the skill does, e.g., 'Creates...', 'Generates...', 'Validates...'
1.2-desc-whenline 3
Description missing WHEN clause - recommended by agentskills spec
Fix: Consider adding 'Use when...' or 'Activate when...' to description
1.3-tools-unknownline 8
Unknown tool 'mcp__plugin_origin_origin__doctor' in allowed-tools
Fix: Use known tools: Read, Write, Edit, Bash, Glob, Grep, etc.
1.3-tools-unknownline 8
Unknown tool 'mcp__plugin_origin_origin__context' in allowed-tools
Fix: Use known tools: Read, Write, Edit, Bash, Glob, Grep, etc.
7.3-mcp-no-versionline 1
MCP skill without protocol version specification
Fix: Specify protocol version (e.g., 2024-11-05)
7.5-pii-detectedline 26
Potential IP address detected in content
Fix: Use placeholder: 192.0.2.1 (documentation range)
7.5-pii-detectedline 65
Potential IP address detected in content
Fix: Use placeholder: 192.0.2.1 (documentation range)
7.5-pii-detectedline 100
Potential IP address detected in content
Fix: Use placeholder: 192.0.2.1 (documentation range)
Suggestions (7)
16.3-no-rollbackline 11
State-modifying skill lacks rollback or recovery guidance
Fix: Add rollback instructions: how to undo changes if something goes wrong (e.g., git revert, backup/restore steps)
17.1-no-input-contractline 11
No input contract found; unclear what data the skill expects
Fix: Document what the skill expects as input (format, required fields, constraints)
17.2-no-output-contractline 11
No output contract found; unclear what the skill produces
Fix: Document what the skill produces (format, structure, side effects)
17.3-no-mode-awarenessline 11
Skill does not clarify standalone vs composed behavior
Fix: Clarify whether the skill works standalone, in pipelines, or both
3.3-name-single-wordline 2
Single-word names are less discoverable
Fix: Consider a two-word name like 'task-tracker' or 'code-reviewer'
18.3-no-structured-outputline 1
No structured output format defined for machine consumption
Fix: Define a structured output format (JSON, YAML, or table) so downstream tools can parse results
7.3-mcp-no-transportline 1
MCP skill without transport type specification
Fix: Specify transport type (stdio, sse, or websocket)
OWASP Agentic (Cat 26)
Agent surface detected — declares tool beyond Read/Glob/Grep: Bash; declares MCP tool mcp__plugin_origin_origin__doctor; declares MCP tool mcp__plugin_origin_origin__context; performs consequential actions
3 warning
-
26.02-ASI02-unconstrained-bash
warning
Bash is granted with no constraint note (which commands, why)
Fix: document which Bash commands the skill runs and why, or narrow the grant
-
26.05-ASI05-pipe-to-shell
warning
pipe-to-shell install (curl|sh / wget|bash) executes unverified remote code
line 33
Fix: remove dynamic code execution, or sandbox and verify the input before running it
-
26.10-ASI10-no-killswitch
warning
long-running / background pattern with no documented kill-switch or iteration cap
line 13
Fix: document how to stop the skill (Ctrl+C, kill, cancel) or state a bounded iteration count
ASI-01: skippedASI-02: failASI-03: skippedASI-04: skippedASI-05: failASI-06: skippedASI-07: skippedASI-08: skippedASI-09: skippedASI-10: failASI-11: skipped
Badges
skillcheck
✕ passed
skillcheck
antislop 100
skillcheck
WCAG AA
skillcheck
WCAG AAA
skillcheck
enterprise