skill-eval

65 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.

By lamngockhuong/aiteamkit (GitHub) · coding · 12 stars · scanned at commit 881b5b7

Evaluate an agent skill a project has written, for Claude Code, Codex or Cursor: a static check of its structure, metadata, size and safety, with a security gate for what the skill does and not only what it holds, a check against the project's own written conventions, trigger measurement on Claude Code, drafted trigger cases it lacks, a review of one run of it in this conversation, and one composite score with a grade above the figures behind it. Reads the skill and changes nothing in it. Use b…

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this. Expected for a coding skill.

Found in 5 places.

plugins/atkx/skills/skill-eval/SKILL.md, line 61/atkx:skill-eval <skill-path> # static check, project conventions, then the score
plugins/atkx/skills/skill-eval/scripts/trigger-run.mjs, line 40import { spawn, spawnSync } from 'node:child_process';
plugins/atkx/skills/skill-eval/scripts/trigger-run.mjs, line 163const r = spawnSync('pkill', ['-KILL', '-u', String(uid), '-f', '--', `--settings ${escapeRe(join(dir, 'settings.json'))}`], { stdio: 'ignore' });

Show 2 more

plugins/atkx/skills/skill-eval/scripts/trigger-run.mjs, line 186if (IS_WINDOWS) spawnSync('taskkill', ['/pid', String(child.pid), '/t', '/f'], { stdio: 'ignore' });
plugins/atkx/skills/skill-eval/scripts/trigger-run.mjs, line 244const res = spawnSync('git', ['-C', repo, 'ls-files', '-z', '--cached', '--others', '--exclude-standard'], {

Connects to the internet

The author does not mention this.

Found in 1 place.

plugins/atkx/skills/skill-eval/references/static-checks.md, line 160| `network` | a network call to a host the skill's `SKILL.md` does not name: the usual command-line downloaders, `fetch(...)`, an HTTP client of Node, Python or

Downloads and installs other software

The author does not mention this.

Found in 2 places.

plugins/atkx/skills/skill-eval/references/static-checks.md, line 241A command that runs a package runner, `npx`, `npm x`, `npm exec`, `pnpm dlx`, `yarn dlx`, `bunx`,
plugins/atkx/skills/skill-eval/references/static-checks.md, line 242`uvx`, `uv tool run`, `pipx run`, or `create` or `init` of `npm`, `yarn`, `pnpm` or `bun` with a

Reads your saved credentials, such as SSH keys or .env files

This is disclosed by the author in the skill's SKILL.md or README.

Found in 1 place.

plugins/atkx/skills/skill-eval/scripts/static-check.mjs, line 749const SECRET_FILE = /(?:^|\/)(?:\.env(?:\.(?!(?:example|sample|template|dist)$|[^/]*\.(?:example|sample)$)[^/]*)?|id_rsa|id_dsa|id_ecdsa|id_ed25519|\.netrc|\.pg

Safer alternatives

Low-risk skills in the same category (coding) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'skill-eval' ] || [ -L ~/.agents/skills/'skill-eval' ]; then echo 'A skill folder named skill-eval already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/lamngockhuong/aiteamkit' "$d" && git -C "$d" checkout --quiet '881b5b74a42c1572cbf6433bf686a3c2724a6ee7' -- 'plugins/atkx/skills/skill-eval' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/atkx/skills/skill-eval' ~/.agents/skills/'skill-eval' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'skill-eval' ~/.claude/skills/'skill-eval' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for lamngockhuong/aiteamkit shows the score of its lowest-scoring skill.

SkillTrust badge for lamngockhuong/aiteamkit

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/lamngockhuong/aiteamkit.svg)](https://zalavijaysinh.github.io/skilltrust/repos/lamngockhuong/aiteamkit/)

Score history

Date	Version	Score
2026-11-14	`881b5b7`	65
2026-11-10	`5dae324`	65