mcpField
S
skill-warden

skill-warden

github.com/mphinanceSecurity3284 installsUpdated 2d ago
Repository

About skill-warden

skill-warden audits a repository’s skills/ directory for health, security risks, and duplicate triggers. It is intended for teams maintaining collections of agent skills and produces a report before any fixes or deletions.

Key features

  1. 01Finds unused or incorrectly formatted skills
  2. 02Flags destructive commands and unauthorized API calls
  3. 03Detects duplicate trigger phrases
  4. 04Scores documentation, determinism, and safety
  5. 05Creates a report and waits for approval before fixes

Use cases

  1. 01Review an agent skill directory periodically
  2. 02Find skill commands that may delete data
  3. 03Identify deprecated skills and trigger conflicts

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/mphinance/alpha-skills --skill skill-warden

After installing, type/skill-wardenin Claude Code to confirm it loaded.

Bundled filesREADME.md

Details

From the project README

Skill Warden

"Trust, but verify."

With a repository containing over 100+ highly specialized agent skills, technical debt and security risks become non-trivial. Skill Warden automates the health and security audits of the skills/ directory.

Core Directives

  1. Dead Skill Detection: Scans for skills that haven't been invoked in the last 30 days or lack proper SKILL.md formatting.
  2. Security Auditing: Parses shell commands embedded in skills. Flags any usage of destructive flags (e.g., rm -rf, --delete with rsync) or unauthorized external API calls.
  3. Conflict Resolution: Identifies duplicate trigger phrases across different skills.
  4. Grading Matrix: Assigns a health score (0-100) to each skill based on documentation completeness, deterministic behavior, and safety constraints.

Usage

When invoked via "Run Skill Warden" or "Audit my skills":

  1. Recursively read all SKILL.md files.
  2. Generate a skill_audit_report.md artifact detailing warnings, critical errors, and a list of deprecated skills.
  3. Await user confirmation before attempting auto-fixes or deletion of dead skills.

Comments

Markdown supported