Skill Reviewer

Use this skill to audit, review, or validate Claude Code skills (.md files in .claude/commands/). Invoke when user wants to check skill quality, cross-platfo...

This skill appears to be a local reviewer that runs bundled scripts and calls an external 'skill-creator' skill for deep content checks — there are three practical things to consider before using it: 1) Directory/layout mismatch: The SKILL.md text says it targets .claude/commands/ files, but validate.sh looks for skills/*/SKILL.md. If your skills live in .claude/commands/ the provided scripts won't find them unless you move or adapt files. Confirm the repository layout you intend to scan. 2) External dependency: The audit requires a 'skill-creator' skill for content-quality checks and explicitly instructs you to halt if it's missing. Verify that 'skill-creator' is available in your agent environment, and be prepared to run that step manually or accept that the audit will be incomplete without it. 3) Script scope and false positives: quick_validate.py implements a very small YAML frontmatter parser and enforces a strict set of allowed frontmatter keys and naming rules. This can produce false positives for skills that validly use other metadata keys or different layouts. Review failing messages before assuming they indicate malicious content. Operational safety tips: - Run the scripts in a controlled checkout (not on a sensitive system) to verify behavior. - Inspect the scripts (they're short and included) to confirm they won't execute network calls; they do not fetch remote code. - If you plan to run this on a CI or shared environment, ensure python3 and a POSIX shell are available and that the repo layout matches what validate.sh expects. Given these mismatches and the hard dependency on another skill, the package is coherent enough to use with care but has enough surprising behaviors to label it 'suspicious' rather than 'benign.'

Type: OpenClaw Skill Name: nini-skill-reviewer Version: 0.3.0 The skill bundle is a utility designed to audit and validate the structure and compatibility of other AI agent skills. It utilizes a local shell script (scripts/validate.sh) and a Python script (scripts/quick_validate.py) to perform static analysis on YAML frontmatter and naming conventions. The instructions in SKILL.md and the guidance in references/compatibility-checklist.md are strictly aligned with the stated purpose of ensuring cross-platform compatibility and do not contain any malicious directives, data exfiltration logic, or suspicious execution patterns.