跳到主要内容
知仓学习社ZHICANG

review-a-skill

Use when evaluating whether a skill belongs in a library. Preview content, check frontmatter, validate structure, and decide whether to keep, curate…

不碰外部(只输出文字)无严重或高危命中MoizIbnYousaf/ai-agent-skills

它会碰到什么

扫了多少1 个文本文件,2 KB
它会碰到什么不碰外部(只输出文字)
命中总数0 处
命中统计严重 0 · 高 0 · 中 0 · 低 0

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Review A Skill

Goal

Evaluate a single skill's quality, relevance, and safety before it enters or stays in a library.

Guardrails

  • Always use --format json for machine-readable output in automated pipelines.
  • Always use --fields to limit output size when inspecting catalog entries.
  • Always use --dry-run before curating or removing a skill.
  • Never remove a skill without first checking if other skills depend on it via info --format json dependencies.

Workflow

  1. Preview the skill content to check for quality and safety.
npx ai-agent-skills preview <skill-name>

The preview command sanitizes content — if it flags sanitization, investigate before proceeding.

  1. Inspect the catalog entry for metadata completeness.
npx ai-agent-skills info <skill-name> --format json --fields name,description,tags,collections,dependencies
  1. Validate the skill's SKILL.md structure.
npx ai-agent-skills validate <skill-name>
  1. If the skill needs curation (notes, collections, verification):
npx ai-agent-skills curate <skill-name> --notes "Reviewed: solid patterns" --verify --dry-run
npx ai-agent-skills curate <skill-name> --notes "Reviewed: solid patterns" --verify
  1. If the skill should be removed:
npx ai-agent-skills curate <skill-name> --remove --dry-run
npx ai-agent-skills curate <skill-name> --remove --yes

Decision Criteria

  • Keep: Clear description, valid frontmatter, useful to the library's audience, no injection patterns.
  • Curate: Needs better whyHere, collection placement, or verification status.
  • Remove: Duplicate, outdated, broken source, or contains suspicious content.

Gotchas

  • The preview command only works for vendored (house) skills. Upstream skills show description and whyHere only.
  • The validate command checks frontmatter structure but not content quality — that requires human or agent judgment.
  • Removing a skill that other skills depend on will break the dependency graph. Always check dependencies.usedBy first.

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。