Clean skill
paranoid auditor for Claude Code skills
npx -y skills add AntonioTimo/skillchecker --skill clean-skillAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
A minimal example skill that demonstrates safe defaults. It counts the words in a given text file. Use this as a baseline for what a clean skill looks like.
SKILL.md
1.3 KB, 235 tokens by cl100k_base, as published. Nobody here has run it
Example: Clean Skill
A minimal skill demonstrating safe defaults. It does one job — count words in a file — and asks for nothing more than what it strictly needs.
Step 0 — Validate input
FILE_PATH="$1"
test -f "$FILE_PATH" || { echo "FILE_NOT_FOUND: $FILE_PATH"; exit 1; }
test ! -L "$FILE_PATH" || { echo "REFUSING_SYMLINK: $FILE_PATH"; exit 1; }
Step 1 — Count words
wc -w "$FILE_PATH"
Step 2 — Report
Tell the user the count in plain prose.
Why this passes audit
disable-model-invocation: true— only invoked by usercontext: fork,agent: general-purpose— standard, isolatedallowed-toolsis narrow: only the specific commands actually used (wc -w,test,echo)- Input validation: existence + symlink rejection
- No network calls, no writes, no sensitive paths read
- Description matches behavior exactly