$npx -y skills add mphinance/alpha-skills --skill skill-wardenSecurity scanner and health check for your AI agent skills tree. Identifies dead skills, missing documentation, and unsafe shell execution paths.
| 1 | # Skill Warden |
| 2 | |
| 3 | *"Trust, but verify."* |
| 4 | |
| 5 | With a repository containing over 100+ highly specialized agent skills, technical debt and security risks become non-trivial. Skill Warden automates the health and security audits of the `skills/` directory. |
| 6 | |
| 7 | ## Core Directives |
| 8 | |
| 9 | 1. **Dead Skill Detection:** Scans for skills that haven't been invoked in the last 30 days or lack proper `SKILL.md` formatting. |
| 10 | 2. **Security Auditing:** Parses shell commands embedded in skills. Flags any usage of destructive flags (e.g., `rm -rf`, `--delete` with `rsync`) or unauthorized external API calls. |
| 11 | 3. **Conflict Resolution:** Identifies duplicate trigger phrases across different skills. |
| 12 | 4. **Grading Matrix:** Assigns a health score (0-100) to each skill based on documentation completeness, deterministic behavior, and safety constraints. |
| 13 | |
| 14 | ## Usage |
| 15 | |
| 16 | When invoked via "Run Skill Warden" or "Audit my skills": |
| 17 | 1. Recursively read all `SKILL.md` files. |
| 18 | 2. Generate a `skill_audit_report.md` artifact detailing warnings, critical errors, and a list of deprecated skills. |
| 19 | 3. Await user confirmation before attempting auto-fixes or deletion of dead skills. |