Skylv Skill Validator
AdvisoryAudited by Static analysis on May 1, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If run on a broad or unintended folder, the script may read and summarize SKILL.md or README.md files from those subdirectories.
The CLI processes a user-supplied directory, or a default local skills directory, and generateReport reads subdirectories and documentation files. This is expected for the stated validator purpose, but it is still local file access.
const targetDir = process.argv[2] || 'C:/Users/Administrator/workspace/skills'; generateReport(targetDir);
Run it only against skill directories you intend to review, and check the generated report before sharing it.
A user following the auto-fix instructions may find the script missing or may be tempted to run a separately obtained script that was not part of this review.
SKILL.md documents an auto-fix companion script, but the supplied manifest includes only engine.js and SKILL.md. The absent script's behavior cannot be reviewed here, although the provided engine.js does not invoke it automatically.
The companion script `fix_skill_md.cjs` automatically fixes: - Missing `description` field - Missing `keywords` field - Missing `Install` section - Missing `Usage` section ```bash node fix_skill_md.cjs ```
Do not run any unprovided fix_skill_md.cjs unless you separately review its contents; the publisher should include the script or remove/update the documentation.