Adoption

Agent Skills are supported by leading AI development tools.

VS Code Gemini CLI GitHub Goose Amp Cursor Claude Code Letta OpenCode Claude OpenAI Codex Factory VS Code Gemini CLI GitHub Goose Amp Cursor Claude Code Letta OpenCode Claude OpenAI Codex Factory

paulrberg/skill-doctor

Name: skill-doctor
Author: paulrberg

skills/skill-doctor/SKILL.md

npx skillsauth add paulrberg/agent-skills skill-doctor

Clean

TrivyContainer and dependency vulnerability scanner

Clean

SemgrepStatic code analysis for vulnerabilities

Clean

mcp-scan (Snyk)Model Context Protocol security validation

Skipped

Snyk (dep)Open source security scanning

Skipped

Socket.devSupply chain security analysis

Skipped

VirusTotalMulti-engine malware detection

Skipped

CrowdStrikeAdvanced threat intelligence

Skipped

OSV-ScannerOpen Source Vulnerability database check

Skipped

OWASP Dep-Check

Skill Doctor

Audit local Agent Skills catalogs and installed skill roots, then apply only narrow metadata repairs when requested.

Arguments

--root PATH: Scan this catalog or installed skill root. Repeatable. Default: current working directory.
--format text|json: Select report format. Default: text.
--fix-safe: Create missing agents/openai.yaml files or update mismatched policy.allow_implicit_invocation.

Workflow

Resolve the skill directory, then run the helper from that directory:
```
uv run scripts/skill-doctor.py "$ARGUMENTS"
```
Use JSON when another command or agent will consume the result:
```
uv run scripts/skill-doctor.py --root . --format json
```

Run safe fixes only after reading the findings:

uv run scripts/skill-doctor.py --root . --fix-safe

Re-run without --fix-safe after any manual edits.

Findings

Treat error findings as catalog defects that should block publishing or syncing.
Treat warning findings as review-required catalog hygiene issues.
Prompt-hygiene warnings are advisory and never auto-fix: stale model pins, oversized unconditional Markdown references, conflicting requirement/prohibition language, and missing completion evidence.
Use path and line from JSON output for precise follow-up edits.

Safe Fix Policy

--fix-safe may only:

Create a missing agents/openai.yaml with policy.allow_implicit_invocation derived from SKILL.md.
Update an existing allow_implicit_invocation boolean when it disagrees with disable-model-invocation.

Do not use the helper to rewrite frontmatter order, descriptions, README rows, references/version.txt, or relative links. Make those edits manually and verify with a fresh audit.

Related Skills

skill-doctor only audits the roots you pass; it does not search for them. To locate skill installs, duplicates, and cross-references across the machine, use the skill-map skill when it is installed.

Exit Codes

0: Clean, or all requested safe fixes succeeded and no findings remain.
1: Findings remain.
2: Invalid arguments or unreadable environment.
3: A requested safe fix failed.

paulrberg/skill-doctor

skills/skill-doctor/SKILL.md

Use to audit Agent Skills catalogs or installed skill roots for metadata and doc-link issues; optionally apply conservative --fix-safe repairs.

66 stars

testing

Updated Jul 12, 2026

$ install --global

skillsauth

npx skillsauth add paulrberg/agent-skills skill-doctor

Install this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.

Security Scan Results

3 of 9 scanners reported clean

Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.

Scanners Passed

Scanners in report

Clean

TrivyContainer and dependency vulnerability scanner

95%

Clean

SemgrepStatic code analysis for vulnerabilities

95%

Clean

mcp-scan (Snyk)Model Context Protocol security validation

95%

Skipped

Snyk (dep)Open source security scanning

50%

Skipped

Socket.devSupply chain security analysis

50%

Skipped

VirusTotalMulti-engine malware detection

50%

Skipped

CrowdStrikeAdvanced threat intelligence

50%

Skipped

OSV-ScannerOpen Source Vulnerability database check

50%

Skipped

OWASP Dep-Check

50%

Last scanned: Jul 12, 2026, 6:33 AM38.6s4 files scanned

SKILL.md

argument-hint:: [--root PATH ...] [--format text|json] [--fix-safe]
disable-model-invocation:: false
name:: skill-doctor
user-invocable:: true

Skill Doctor

Audit local Agent Skills catalogs and installed skill roots, then apply only narrow metadata repairs when requested.

Arguments

--root PATH: Scan this catalog or installed skill root. Repeatable. Default: current working directory.
--format text|json: Select report format. Default: text.
--fix-safe: Create missing agents/openai.yaml files or update mismatched policy.allow_implicit_invocation.

Workflow

Resolve the skill directory, then run the helper from that directory:
```
uv run scripts/skill-doctor.py "$ARGUMENTS"
```
Use JSON when another command or agent will consume the result:
```
uv run scripts/skill-doctor.py --root . --format json
```

Run safe fixes only after reading the findings:

uv run scripts/skill-doctor.py --root . --fix-safe

Re-run without --fix-safe after any manual edits.

Findings

Treat error findings as catalog defects that should block publishing or syncing.
Treat warning findings as review-required catalog hygiene issues.
Prompt-hygiene warnings are advisory and never auto-fix: stale model pins, oversized unconditional Markdown references, conflicting requirement/prohibition language, and missing completion evidence.
Use path and line from JSON output for precise follow-up edits.

Safe Fix Policy

--fix-safe may only:

Create a missing agents/openai.yaml with policy.allow_implicit_invocation derived from SKILL.md.
Update an existing allow_implicit_invocation boolean when it disagrees with disable-model-invocation.

Do not use the helper to rewrite frontmatter order, descriptions, README rows, references/version.txt, or relative links. Make those edits manually and verify with a fresh audit.

Related Skills

skill-doctor only audits the roots you pass; it does not search for them. To locate skill installs, duplicates, and cross-references across the machine, use the skill-map skill when it is installed.

Exit Codes

0: Clean, or all requested safe fixes succeeded and no findings remain.
1: Findings remain.
2: Invalid arguments or unreadable environment.
3: A requested safe fix failed.

Related Skills

paulrberg/frontend-design

development

VerifiedTrustedCommunity

Use when creating or substantially redesigning web interfaces, landing pages, dashboards, components, or other frontend UI where visual direction and implementation quality matter. Produces subject-specific art direction, accessible responsive code, and rendered visual verification.

68SKILL.mdUpdated Jul 22, 2026

paulrberg/frontend-design

paulrberg/claude-handoff

development

VerifiedTrustedCommunity

Orchestrate one to five Sonnet subagents to implement an approved Claude Code plan.

68SKILL.mdUpdated Jul 21, 2026

paulrberg/claude-handoff

paulrberg/coingecko-open-page

tools

VerifiedTrustedCommunity

Open the CoinGecko historical-data page for a coin/date in Chromium via Chrome DevTools MCP.

68SKILL.mdUpdated Jul 12, 2026

paulrberg/coingecko-open-page

paulrberg/codex-handoff

tools

VerifiedTrustedCommunity

Orchestrate one to five Codex CLI agents to implement an approved Claude Code plan.

68SKILL.mdUpdated Jul 11, 2026

paulrberg/codex-handoff

Download

For Claude Desktop. Download once, then upload the file in the app — no terminal needed.

Need help? View full Cowork setup guide →

Install manually

Choose your platform

# Clone the repo
git clone https://github.com/paulrberg/agent-skills.git

# Copy into Claude Code skills folder (global)
cp -r agent-skills/skills/skill-doctor ~/.claude/skills/

Claude Code Skills — official skills path docs.

Repository

paulrberg/agent-skills

66 stars

Compatible with

Claude Code

OpenAI Codex CLI

ChatGPT