← All skills
skill-tester
95 / 100 · Low risk
Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.
By alirezarezvani/claude-skills (GitHub) · coding · 29,577 stars · scanned at commit 91a1dda
Use when authoring or auditing a skill in this ecosystem, before release. Validates structure with skill_validator.py, runs its scripts with script_tester.py and grades quality and security with quality_scorer.py and security_scorer.py.
Works with any agent that supports SKILL.md skills.
What this skill can do
Runs commands on your computer
The author does not mention this. Expected for a coding skill.
Found in 32 places.
Show 17 more
- engineering/skills/skill-tester/assets/sample-skill/SKILL.md, line 55
python text_processor.py batch text_files/ --output results/ - engineering/skills/skill-tester/assets/sample-skill/SKILL.md, line 63
$ python text_processor.py analyze sample.txt - engineering/skills/skill-tester/assets/sample-skill/SKILL.md, line 75
$ python text_processor.py analyze sample.txt --format json - engineering/skills/skill-tester/assets/sample-skill/SKILL.md, line 93
$ python text_processor.py transform sample.txt --mode title - engineering/skills/skill-tester/assets/sample-skill/SKILL.md, line 107
cd scripts/ - engineering/skills/skill-tester/references/quality-scoring-rubric.md, line 452
- **Dangerous Functions**: `os.system()`, `eval()`, `exec()`, `subprocess` with `shell=True` - engineering/skills/skill-tester/references/quality-scoring-rubric.md, line 453
- **Safe Alternatives**: `subprocess.run(args, shell=False)`, `shlex.quote()`, `shlex.split()` - engineering/skills/skill-tester/references/quality-scoring-rubric.md, line 496
result = subprocess.run(["ls", user_input], capture_output=True) - engineering/skills/skill-tester/references/quality-scoring-rubric.md, line 512
os.system(f"ls {user_input}") # BAD - engineering/skills/skill-tester/scripts/script_tester.py, line 390
process = subprocess.run( - engineering/skills/skill-tester/scripts/script_tester.py, line 407
except subprocess.TimeoutExpired: - engineering/skills/skill-tester/scripts/script_tester.py, line 422
process = subprocess.run( - engineering/skills/skill-tester/scripts/script_tester.py, line 452
except subprocess.TimeoutExpired: - engineering/skills/skill-tester/scripts/script_tester.py, line 483
process = subprocess.run( - engineering/skills/skill-tester/scripts/script_tester.py, line 498
except subprocess.TimeoutExpired: - engineering/skills/skill-tester/scripts/script_tester.py, line 543
process = subprocess.run( - engineering/skills/skill-tester/scripts/security_scorer.py, line 430
- os.system(), os.popen() usage
and 12 more places
Install
Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.
if [ -e ~/.agents/skills/'skill-tester' ] || [ -L ~/.agents/skills/'skill-tester' ]; then echo 'A skill folder named skill-tester already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/alirezarezvani/claude-skills' "$d" && git -C "$d" checkout --quiet '91a1ddaab1ae8fe95b8ecd3e98419458db86a992' -- 'engineering/skills/skill-tester' && mkdir -p ~/.agents/skills && cp -R "$d"/'engineering/skills/skill-tester' ~/.agents/skills/'skill-tester' && rm -rf "$d"; fi
Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'skill-tester' ~/.claude/skills/'skill-tester' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.
Badge for your README
The badge for alirezarezvani/claude-skills shows the score of its lowest-scoring skill.

[](https://zalavijaysinh.github.io/skilltrust/repos/alirezarezvani/claude-skills/)
Score history
| Date | Version | Score |
|---|
| 2026-11-10 | 91a1dda | 95 |
| 2026-11-08 | 8f08254 | 95 |
| 2026-11-06 | 8f08254 | 95 |