skill-quality

skill-quality is a skill for Claude Code, Codex from SSBun/csl-agent-kit. It costs 65 tokens per session (598 once invoked), scanned A, original, MIT.

A local quality check for Agent Skill packages. It checks package structure, front matter, included resources, context size, and routing fixtures without running the package’s scripts or project tests.

In plain words
What is it for?
Use it after creating or changing a skill, or when checking one package or all packages in a workspace.
Why use it?
It gives a repeatable pass, warning, or failure result before a skill package is considered ready. This catches package-quality problems separately from application tests.

Skill for Claude CodeCodex

Part of the csl plugin — 33 skills, 2 commands, 5 agents, 10 hooks shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/ssbun/csl-agent-kit/skill-quality
Any agent
npx skills add SSBun/csl-agent-kit --skill skill-quality
Clone the repo
git clone --depth 1 https://github.com/SSBun/csl-agent-kit

Made for: Claude Code, Codex.

Or install csl, the plugin that ships this one along with the rest of its 33 skills, 2 commands, 5 agents, 10 hooks.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for skill-quality

README.md
[![agentmods](https://agentmods.dev/badge/skills/ssbun/csl-agent-kit/skill-quality.svg)](https://agentmods.dev/skills/ssbun/csl-agent-kit/skill-quality)
Your own site
<a href="https://agentmods.dev/skills/ssbun/csl-agent-kit/skill-quality"><img src="https://agentmods.dev/badge/skills/ssbun/csl-agent-kit/skill-quality.svg" alt="Measured on agentmods" height="20"></a>
Per session 65 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 598 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00065 $0.00598
Opus 5 $0.00032 $0.00299
Sonnet 5 $0.00013 $0.00120
Haiku 4.5 $0.00006 $0.00060

Measured 4d ago against content hash c49c248da4cd, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

skill-quality scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/check.js), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/meta/skill-quality/SKILL.md · 45 lines

How it starts

The opening of the file, as written. The whole thing — 45 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Skill Quality

Run the repository-owned deterministic gate for Skill package maintenance. It reports package-level pass, warning, or failure results and never executes package scripts or project tests.

Commands

Resolve this Skill's directory from SKILL.md, then run:

node <skill-quality-dir>/scripts/check.js <skill-dir>
node <skill-quality-dir>/scripts/check.js --all --workspace <workspace>

Add --json for machine-readable output or --no-color for plain human output. Exit code 0 means no failures, including warning-only results; 2 means a quality failure; 1 means invalid invocation or no discovered packages.

Workflow

  1. Check every changed Skill package individually. Use --all only for a repository-wide Skill change or an explicit whole-workspace request.
  2. Fix every failure before completion. Review warnings in context and disclose any accepted warning that affects confidence; a context-budget warning never justifies deleting required workflow guidance.
  3. Keep package-specific behavioral checks aligned. Run focused project tests only when the user and governing project rules authorize them; this gate does not run tests on the Agent's behalf.

Deterministic Checks

The gate checks:

  • SKILL.md frontmatter keys, name, description, and directory identity;
  • parseability of package JSON and YAML files;
  • agents/openai.yaml display fields when present;
  • empty or unreferenced references/, scripts/, evals/, assets/, and templates/ resources;
  • estimated initial-load context from SKILL.md and agents/ against a 1000-token warning budget;
  • evals/trigger_cases.json schema, plus deterministic routing evaluation when evals/semantic_config.json is also present.

Boundaries

Do not use this Skill to validate AGENTS.md, CLAUDE.md, SOPs, hooks, or ordinary source files. It does not execute package scripts, project tests, builds, packaging, or telemetry, and it does not assign subjective portfolio scores. Apply the owning rule, SOP, or focused project verification to those concerns instead.

Read the full file on GitHub · 45 lines

Files

What ships with it

3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 45 lines · 65 tokens per session scan A c49c248da4cd

Subscribe to this mod's changes

skill-quality is a skill published in the GitHub repository SSBun/csl-agent-kit (10 stars, last pushed 3d ago), licensed MIT. It adds 65 tokens to every session and 598 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

convex-add

Add a capability to the CURRENT Convex app — consults the served Convex capability catalog for always-current procedures (billing, crons, auth, agent, search, …); falls back to built-in hosting or @convex-dev component search. TRIGGER when the user runs /add, or asks to add hosting/publishing or any backend capability…

openclaw/clawhub · 81 tokens

twitter-reader

Read Twitter/X for financial research using opencli (read-only). Use this skill whenever the user wants to read their Twitter feed, search for financial tweets, view bookmarks, look up user profiles, or gather market sentiment from Twitter/X. Triggers include: "check my feed", "search Twitter for", "show my…

himself65/finance-skills · 161 tokens

chenhao-limit-up

Use when evaluating A-share limit-up (涨停板) setups through Chen Hao's sentiment and momentum lens: market emotion cycles, board strength, follow-through, and short-term aggressive momentum trading.

questflowai/investorskills · 44 tokens

trading-risk-gate

Unified pre-trade safety gate: Ruin check (Law #1), ergodicity audit, and win-rate dominance validation. Absorbs: ergodicity-check, law-of-ruin, win-rate-dominance.

winstonkoh87/Athena-Public · 53 tokens

cwv-optimizer

Diagnose and fix Core Web Vitals issues on AEM Edge Delivery Services pages. Goes deeper than generic CWV advice by understanding EDS-specific performance patterns including the 100KB LCP budget, E-L-D loading phases, block rendering behavior, and third-party script impact. Produces specific fixes for LCP, CLS, and…

adobe/skills · 112 tokens

multi-expert-analyzer

针对通用问题进行多领域专家联合分析, 综合稿产生前必经 fact-checker 与 red-team 两道独立校验。适用场景: 用户提出跨领域或不确定领域的复杂问题, 需要从多个专家角度分别搜证并相互校验后综合成文, 例如该不该买房、该不该跳槽、是否进入某个赛道等。触发关键词: 多角度分析、专家分析、综合分析、多视角、跨领域分析、从不同角度看、深度分析。问题只属于单一明确领域时, 优先使用该领域的专门 skill, 例如纯财务用 finance-core-analysis、纯技术用 software-architect。输出 (全部 markdown 保存到当前项目 markdown/ 目录): (1) 每位专家的中间分析稿…

digoal/blog · 292 tokens