skillspec-check — the eslint for SKILL.md

Validate any repo's Agent Skills against SkillSpec — the conformance standard behind the pm-claude-skills library (451 curated skills) and its community registry.

npx skillspec-check                    # scan the current directory for SKILL.md files
npx skillspec-check skills/            # a specific tree
npx skillspec-check --min-level 2      # CI gate: every skill must be at least L2 Structured
npx skillspec-check --strict --json    # warnings fail; machine-readable output

What it checks

| Level | Requires | |---|---| | L1 Loadable | Valid frontmatter: kebab-case name matching the folder, a description with "Use when …" trigger conditions (that's what makes auto-discovery work) | | L2 Structured | Declared inputs ("Required Inputs" / "What This Skill Produces") and an Output section | | L3 Trustworthy | L2 + Quality Checks and Anti-Patterns — the skill can verify its own output |

Plus, at every level, the security scan the curated library bans on: prompt-injection phrasing, unvetted network calls, data-exfiltration instructions, embedded credentials. Security findings are always errors.

The badge

Wear your conformance level — this renders a live-graded shield for any public repo:

![SkillSpec](https://img.shields.io/endpoint?url=https%3A%2F%2Fpm-skills-mcp.pm-claude-skills.workers.dev%2Fbadge%3Frepo%3DYOURUSER%2FYOURREPO)

The badge service fetches your SKILL.md files, grades them, and reports the minimum level across the repo (a chain is as strong as…). Cached 6 hours.

CI in one line

- run: npx skillspec-check --min-level 1   # add to any workflow; exits 1 on findings

pre-commit

repos:
  - repo: https://github.com/mohitagw15856/pm-claude-skills
    rev: v44.0.0
    hooks:
      - id: skillspec

Zero dependencies, Node ≥ 18. Exit codes: 0 clean · 1 errors / below --min-level / warnings with --strict · 2 usage.