skill-review
Install this skill
npx skills add jezweb/claude-skillsWorks across Claude Code, Cursor, Codex, Copilot & Antigravity
The skill-review tool maintains high-quality standards for AI-agent skill sets by performing automated and manual integrity checks. It addresses the common issue of 'skill rot'βwhere AI agents provide outdated code, non-existent API imports, or stale library patternsβby executing a rigorous nine-phase audit. The process evaluates codebase consistency against official documentation, validates YAML frontmatter, and ensures dependencies remain current. By automating syntactical checks and providing a structured framework for manual verification, the tool prevents hallucinations caused by obsolete development practices. It classifies issues by severity, distinguishing between critical API mismatches and minor formatting errors. Whether upgrading a skill version or preparing a new submission, this process ensures that bundled resources, README files, and code examples remain accurate, functional, and aligned with current production standards.
When to Use This Skill
- β’Auditing an AI skill prior to submission to a public repository
- β’Fixing hallucinated API patterns in legacy skill codebases
- β’Updating dependencies that have exceeded a 90-day staleness threshold
- β’Synchronizing multiple documentation files like README and SKILL.md
- β’Refactoring codebases when a library moves to a new major version
How to Invoke This Skill
Example prompts that trigger this skill in Claude Code, Cursor, or Antigravity:
- βCheck this skill for outdated API patterns
- βRun the 9-phase audit on the current skill
- βReview this directory for breaking changes
- βScan the skill for stale dependencies and fix them
- βValidate the schema and imports for this project
Pro Tips
- π‘Integrate the automated review scripts (e.g., `./scripts/review-skill`) into your CI/CD pipeline to continuously monitor skill health and catch issues early.
- π‘Prioritize fixes based on the 'Severity' categorization (Critical, High, Medium, Low), focusing first on security vulnerabilities and breaking changes that impact core functionality.
- π‘Leverage the 'Auto-fix unambiguous' feature for efficient resolution of minor issues, but always perform a human review for architectural or design-related changes.
What this skill does
- β’Execute automated 9-phase audits for code and configuration accuracy
- β’Identify and resolve non-existent API imports and method signature drift
- β’Validate YAML frontmatter and directory structure for discovery optimization
- β’Generate standardized audit reports with severity-based classification
- β’Perform version control management including semantic versioning bumps
When not to use it
- βRunning on non-technical documents that lack API or schema definitions
- βPerforming initial conceptual brainstorming where structure is not yet defined
Example workflow
- Invoke /review-skill <skill-name> to initiate the process
- Allow the automated script to validate YAML and link integrity
- Review the audit report to identify critical API mismatches
- Apply auto-fixes for unambiguous issues like missing imports
- Manually verify architectural choices for high-severity findings
- Commit the updated files with a generated changelog
Prerequisites
- βActive AI-agent development environment
- βAccess to the target skill repository
- βInstalled review-skill bash scripts
Pitfalls & limitations
- !Auto-fixes may not resolve complex architectural inconsistencies
- !Requires manual intervention for breaking changes that impact logic
- !False positives can occur if local documentation is not up to date
FAQ
How it compares
Unlike a generic code review prompt, this tool utilizes a rigid 9-phase protocol specifically calibrated for AI agent metadata, bundled resource integrity, and external documentation syncing.
π Full skill instructions β original source: jezweb/claude-skills
## Process
Invoke:
/review-skill <skill-name> or use this skill when detecting outdated patterns**Production evidence**: better-auth audit (2025-11-08) - found 6 critical issues including non-existent API imports, removed 665 lines incorrect code, implemented v2.0.0
---
## 9-Phase Audit
1. **Pre-Review**: Install skill, check version/date, test discovery
2. **Standards**: Validate YAML, keywords, third-person style, directory structure
3. **Official Docs**: WebFetch/Context7 verify API patterns, GitHub updates, npm versions, production repos
4. **Code Examples**: Verify imports exist, API signatures match, schema consistency, templates work
5. **Cross-File Consistency**: Compare SKILL.md vs README.md, bundled resources match files
6. **Dependencies**: Run
./scripts/check-versions.sh, check breaking changes, verify "Last Verified"7. **Categorize**: Severity (π΄ Critical / π‘ High / π Medium / π’ Low) with evidence (GitHub/docs/npm)
8. **Fix**: Auto-fix unambiguous, ask user for architectural, update all files, bump version
9. **Verify**: Test discovery, templates work, no contradictions, commit with changelog
**Automated** (via
./scripts/review-skill.sh): YAML syntax, package versions, broken links, TODOs, file org, staleness**Manual** (AI): API methods vs docs, GitHub issues, production comparisons, code correctness, schema consistency
---
## Severity Classification
π΄ **CRITICAL**: Non-existent API/imports, invalid config, missing dependencies
π‘ **HIGH**: Contradictory examples, inconsistent patterns, outdated major versions
π **MEDIUM**: Stale minors (>90d), missing docs sections, incomplete errors
π’ **LOW**: Typos, formatting, missing optional metadata
## Fix Decision
**Auto-fix**: Unambiguous (correct import from docs), clear evidence, no architectural impact
**Ask user**: Multiple valid approaches, breaking changes, architectural choices
## Version Bumps
- **Major** (v1βv2): API patterns change
- **Minor** (v1.0βv1.1): New features, backward compatible
- **Patch** (v1.0.0βv1.0.1): Bug fixes only
---
## Example: better-auth Audit (2025-11-08)
**π΄ CRITICAL #1**: Non-existent
d1Adapter import from 'better-auth/adapters/d1'- **Evidence**: Official docs show drizzleAdapter, GitHub has no d1Adapter export, 4 production repos use Drizzle/Kysely
- **Fix**: Replaced with
drizzleAdapter from 'better-auth/adapters/drizzle'**Result**: 3 files deleted (obsolete), 3 created (correct patterns), +1,266 lines, v1.0βv2.0, 3.5 hours
---
## Issues Prevented (10)
1. **Fake API adapters** - Non-existent imports
2. **Stale API methods** - Changed signatures
3. **Schema inconsistency** - Different table names
4. **Outdated scripts** - Deprecated approaches
5. **Version drift** - Packages >90 days old
6. **Contradictory examples** - Multiple conflicting patterns
7. **Broken links** - 404 URLs
8. **YAML errors** - Invalid frontmatter
9. **Missing keywords** - Poor discoverability
10. **Incomplete bundled resources** - Listed files don't exist
---
## Bundled Resources
**Planning**:
~/.claude/skills/../planning/SKILL_REVIEW_PROCESS.md or repo planning/SKILL_REVIEW_PROCESS.md (complete 9-phase guide)**Scripts**: Repo root
scripts/review-skill.sh (automated validation)**Commands**: Repo root
commands/review-skill.md (slash command, symlinked to ~/.claude/commands/)**References**:
references/audit-report-template.md (output template)---
**Last Verified**: 2026-01-09 | **Version**: 1.0.1
How to Use This Skill Unit
Option A: Project-Specific (Recommended)
- Click "Download" above
- In your project, create the directory:
.agent/skills/skill-review/ - Save the file as
SKILL.md - The agent will automatically discover the skill based on its description.
Option B: Global Installation (All Agents)
Save the file to these locations to make it available across all projects:
- Claude Code:
~/.claude/skills/jezweb/claude-skills/skill-review/SKILL.md - Cursor:
~/.cursor/skills/jezweb/claude-skills/skill-review/SKILL.md - Antigravity:
~/.gemini/antigravity/skills/jezweb/claude-skills/skill-review/SKILL.md
π Install with CLI:npx skills add jezweb/claude-skills
