Skip to main content
agentsSource-backed

Agent Skill QA Reviewer Agent

Source-backed Claude Code subagent prompt for reviewing Agent Skills before adoption or publication, checking SKILL.md scope, descriptions, invocation control, supporting files, tool permissions, helpfulness, safety, and privacy risks against official Claude Code skills guidance.

by Desel72·added 2026-06-08·
Review first review before installing

Open the source and read safety notes before installing.

Citation facts

Source-backed facts for citing this resource, derived directly from the registry — also available as plain text for AI assistants.

Source URLs
https://code.claude.com/docs/en/skills, https://github.com/JSONbored/awesome-claude/blob/main/content/agents/agent-skill-qa-reviewer-agent.mdx
Safety notes
This agent reviews skill quality and adoption readiness; it does not execute the skill, install plugins, run scripts, or approve production rollout by itself., Flag skills that can perform writes, deployments, destructive actions, account changes, network calls, credential handling, or background automation without explicit user control., Recommend `disable-model-invocation: true`, least-privilege `allowed-tools`, or additional human review when a skill has side effects or could trigger too broadly., Treat supporting files, shell injection blocks, and bundled scripts as executable or instruction-bearing review surfaces, not harmless documentation.
Privacy notes
Reads local skill instructions and supporting files, which may expose internal workflow names, repository paths, policies, examples, customer data, or credentials accidentally written into prompts., Review output can mention sensitive skill names, tool permissions, file paths, dynamic commands, and risk findings; keep it out of public PR comments unless sanitized., Skills loaded by Claude can place their descriptions or full instructions into model context, so the review should flag secrets and unnecessary confidential details before adoption.
Author
Desel72
Submitted by
Desel72
Claim status
unclaimed
Last verified
2026-06-08

Decision playbook

Review trust signals before you adopt

Signals are present but mixed. Use the checklist below to confirm the source and operational safety for your environment.

Compare context
Selected

0

Current score

63

Baseline

Delta

No baseline selected

No major trust-signal divergence detected in the current selection.

Source and provenance checks

Needs review

Confirm ownership and provenance before trusting install instructions.

  • Source link availableRequired

    Open the canonical repository and verify ownership.

    Done
  • Source provenance statusRequired

    Marked as source-backed.

    Done
  • Metadata reviewed

    No reviewed flag detected in metadata.

    Pending

Safety and privacy checks

Complete

Validate risk disclosures before installation or API wiring.

  • Safety notes presentRequired

    Review the listed safety guidance before running commands.

    Done
  • Privacy notes presentRequired

    Review data handling notes before connecting accounts or secrets.

    Done
  • Trust level risk gateRequired

    Trust level does not block evaluation.

    Done

Package and install checks

Needs review

Check package metadata and artifact integrity signals.

  • Install payload available

    Install or copy payload is available for review.

    Done
  • Package verification flag

    No package verification flag provided.

    Pending
  • Checksum metadata

    No checksum provided for downloaded artifact.

    Pending

Compare-driven decision checks

Needs review

Use compare context to validate trade-offs before adoption.

  • Compare tray has multiple entries

    Add at least one more entry to compare trust differences.

    Pending
  • Baseline comparison available

    No baseline peer selected yet.

    Pending
  • Diverging trust signals identified

    No major trust-signal divergence found.

    Pending

Setup at a glance

Copy & paste

Copy-ready — paste the snippet to get started.

Adoption plan

Balanced adoption plan

Current risk score 24/100. Use staged verification before broader rollout.

Risk 24

Pre-adoption checks

Validate source and review signals before any execution.

  • Confirm source provenanceRequired

    Source URL/provenance metadata is present.

    Done
  • Confirm metadata review state

    No review metadata found; increase manual validation.

    Pending
  • Verify install payload

    Install/config payload exists and can be inspected.

    Done

Security checks

Confirm safety, privacy, and package integrity signals.

  • Review safety notesRequired

    Safety notes are present.

    Done
  • Review privacy notesRequired

    Privacy notes are present.

    Done
  • Verify package integrity metadata

    No package verification/checksum metadata.

    Pending

Rollout

Adopt in controlled steps based on the selected plan.

  • Run in isolated sandbox firstRequired

    Use a constrained sandbox and observe behavior across multiple tasks.

    Pending
  • Roll out graduallyRequired

    Roll out to a small cohort before wider usage.

    Pending
  • Set monitoring and fallback

    Define rollback path and monitor errors after adoption.

    Pending

Evidence readiness

Evidence readiness matrix · balanced

Missing required evidence: Metadata review. Risk score 31.

Risk 31

Source provenance

Present

Source repository/provenance is listed.

Required in this preset

Metadata review

Missing

Review metadata is missing.

Required in this preset

Safety notes

Present

Safety notes are present.

Required in this preset

Privacy notes

Present

Privacy notes are present.

Optional in this preset

Package integrity

Missing

Package integrity metadata is missing.

Optional in this preset

Install payload

Present

Install payload is available.

Required in this preset

Required gaps: Metadata review

Decision timeline

Decision timeline · balanced

Blocking gaps: Check metadata review status. Risk 28.

Risk 28

triage

Confirm source provenanceRequired

Source/provenance metadata is available.

Done

triage

Check metadata review statusRequired

Review metadata is missing.

Pending

verify

Review safety notesRequired

Safety notes are available.

Done

verify

Review privacy notes

Privacy notes are available.

Done

verify

Validate package integrity metadata

Package integrity metadata is missing.

Pending

rollout

Verify install payload and commandsRequired

Install payload is available.

Done

Blockers: Check metadata review status

Prerequisite readiness

Prerequisite readiness

4 prerequisites to line up before setup.

0/4 ready
Permissions & scopes1Network & hosting1General2

Safety & privacy surface

Safety & privacy surface

4 safety and 3 privacy notes across 5 risk areas. Review closely: credentials & tokens, permissions & scopes.

5 areas
  • SafetyExecution & processesThis agent reviews skill quality and adoption readiness; it does not execute the skill, install plugins, run scripts, or approve production rollout by itself.
  • SafetyCredentials & tokensFlag skills that can perform writes, deployments, destructive actions, account changes, network calls, credential handling, or background automation without explicit user control.
  • SafetyGeneralRecommend `disable-model-invocation: true`, least-privilege `allowed-tools`, or additional human review when a skill has side effects or could trigger too broadly.
  • SafetyLocal filesTreat supporting files, shell injection blocks, and bundled scripts as executable or instruction-bearing review surfaces, not harmless documentation.
  • PrivacyCredentials & tokensReads local skill instructions and supporting files, which may expose internal workflow names, repository paths, policies, examples, customer data, or credentials accidentally written into prompts.
  • PrivacyPermissions & scopesReview output can mention sensitive skill names, tool permissions, file paths, dynamic commands, and risk findings; keep it out of public PR comments unless sanitized.
  • PrivacyCredentials & tokensSkills loaded by Claude can place their descriptions or full instructions into model context, so the review should flag secrets and unnecessary confidential details before adoption.

Safety notes

  • This agent reviews skill quality and adoption readiness; it does not execute the skill, install plugins, run scripts, or approve production rollout by itself.
  • Flag skills that can perform writes, deployments, destructive actions, account changes, network calls, credential handling, or background automation without explicit user control.
  • Recommend `disable-model-invocation: true`, least-privilege `allowed-tools`, or additional human review when a skill has side effects or could trigger too broadly.
  • Treat supporting files, shell injection blocks, and bundled scripts as executable or instruction-bearing review surfaces, not harmless documentation.

Privacy notes

  • Reads local skill instructions and supporting files, which may expose internal workflow names, repository paths, policies, examples, customer data, or credentials accidentally written into prompts.
  • Review output can mention sensitive skill names, tool permissions, file paths, dynamic commands, and risk findings; keep it out of public PR comments unless sanitized.
  • Skills loaded by Claude can place their descriptions or full instructions into model context, so the review should flag secrets and unnecessary confidential details before adoption.

Prerequisites

  • One or more Agent Skill directories with a `SKILL.md` file and any referenced supporting files.
  • Access to the skill's intended user, task boundary, invocation path, and expected output.
  • A clear policy for whether the skill may be model-invoked automatically or must be user-invoked.
  • Permission to inspect tool restrictions, dynamic context commands, scripts, examples, templates, and bundled plugin metadata if present.

Schema details

Install type
copy
Troubleshooting
No
Full copyable content
## Content

Agent Skill QA Reviewer Agent is a reusable Claude Code subagent prompt for
reviewing Agent Skills before a team adopts, publishes, or merges them. It checks
whether the skill is useful, bounded, correctly triggered, safe to load, and
clear enough for a user or model to invoke at the right time.

Use it for skills stored in personal, project, managed, or plugin scope when you
need a second-pass reviewer that focuses on quality assurance rather than
authoring.

## Agent Prompt

You are an Agent Skill QA reviewer for Claude Code. Review the provided Agent
Skill as if it may be adopted by a team and invoked in real coding sessions. Use
the official Claude Code skills documentation, Claude Code feature-loading
guidance, and helpful-content assessment principles as your references.

Review workflow:

1. Identify the skill. Record the skill name, path, intended user, intended task,
   invocation method, and whether it is personal, project, managed, or plugin
   scoped.
2. Check `SKILL.md` structure. Confirm it has valid frontmatter, a concise
   description, clear task boundaries, and instructions that tell Claude what to
   do rather than narrating background.
3. Review trigger quality. Decide whether the description and `when_to_use` text
   are specific enough to trigger correctly without overlapping unrelated
   skills. Flag vague, broad, or marketing-like descriptions.
4. Review invocation control. For skills with side effects, recommend
   `disable-model-invocation: true` or explicit user invocation. For background
   reference skills, confirm users should not need to invoke them directly.
5. Review tools and execution. Inspect `allowed-tools`, `disallowed-tools`,
   shell injection blocks, scripts, templates, examples, and supporting files.
   Flag over-broad tool access, hidden network calls, destructive commands, and
   missing review gates.
6. Review context cost. Check whether the description is short, whether the body
   is focused enough to remain in context after loading, and whether long
   reference material should move into supporting files.
7. Review helpfulness. Ask whether the skill gives original, practical
   instructions, clear expected outputs, and enough context for a real user to
   succeed. Flag thin, duplicate, or unsupported content.
8. Review safety and privacy. Identify secrets, customer data, internal-only
   policies, unnecessary logs, credential handling, sensitive file paths, and
   risky side effects.
9. Decide. Return one of: approve, approve with edits, request changes, reject,
   or escalate to a maintainer/security reviewer.

Output contract:

- Summary: what the skill does and whether it is adoption-ready.
- Blocking findings: issues that must be fixed before use.
- Non-blocking improvements: clarity, trigger, output, or documentation fixes.
- Safety/privacy findings: side effects, permissions, data exposure, and
  recommended controls.
- Suggested frontmatter edits: description, invocation control, tools, model,
  context, paths, or arguments if relevant.
- Final decision: approve, approve with edits, request changes, reject, or
  escalate.

## Features

- Reviews `SKILL.md` frontmatter, body instructions, trigger text, and output
  expectations.
- Applies Claude Code skill behavior: descriptions load for discovery, full
  skill content loads on use, and skills can run inline or in isolated subagent
  context.
- Checks least-privilege tool scoping and user-only invocation for side-effecting
  workflows.
- Uses helpful-content questions to separate practical skill instructions from
  thin, duplicate, or unsupported copy.

## Use Cases

- Review a new project skill before merging it into `.claude/skills/`.
- Audit a plugin skill before distributing it to other repositories.
- Decide whether a skill should be automatically model-invoked or manually
  invoked by users.
- QA a skill library for overlap, vague descriptions, excessive context cost, or
  risky supporting files.

## Source Notes

- Claude Code skills are `SKILL.md` files with YAML frontmatter and markdown
  instructions. Descriptions help Claude decide when to load a skill, while the
  full body loads when the skill is used.
- Official Claude Code guidance distinguishes skills from subagents: skills are
  reusable instructions or workflows; subagents are isolated workers with their
  own context. A subagent can preload skills, and a skill can run in a forked
  context.
- The Claude Code skills docs document invocation control, tool restrictions,
  supporting files, dynamic context, subagent execution, and visibility
  overrides.
- Google's helpful-content guidance recommends self-assessment for reliability,
  usefulness, and "Who, How, and Why" clarity; this maps well to QA checks for
  public or team-distributed skill instructions.

## Duplicate Check

Checked `content/agents`, `content/skills`, the generated README catalog, and
open pull requests for `Agent Skill QA Reviewer Agent`, `skill QA reviewer`,
`SKILL.md review`, `Agent Skills QA`, `Claude Code skill review`, and the source
domains in the issue. Adjacent entries cover skill library curation and
enterprise skill governance, but no existing entry provides a concrete agent
prompt focused on QA review of an individual Agent Skill before adoption or
publication.

## Editorial Disclosure

Submitted as an independent source-backed HeyClaude content entry by `Desel72`.
It is based on public Claude Code and Google Search Central documentation. No
paid placement, referral, affiliate link, or vendor sponsorship is used.

## Sources

- Claude Code skills documentation: https://code.claude.com/docs/en/skills
- Claude Code features overview: https://code.claude.com/docs/en/features-overview
- Google Search Central helpful content guidance: https://developers.google.com/search/docs/fundamentals/creating-helpful-content

About this resource

Content

Agent Skill QA Reviewer Agent is a reusable Claude Code subagent prompt for reviewing Agent Skills before a team adopts, publishes, or merges them. It checks whether the skill is useful, bounded, correctly triggered, safe to load, and clear enough for a user or model to invoke at the right time.

Use it for skills stored in personal, project, managed, or plugin scope when you need a second-pass reviewer that focuses on quality assurance rather than authoring.

Agent Prompt

You are an Agent Skill QA reviewer for Claude Code. Review the provided Agent Skill as if it may be adopted by a team and invoked in real coding sessions. Use the official Claude Code skills documentation, Claude Code feature-loading guidance, and helpful-content assessment principles as your references.

Review workflow:

  1. Identify the skill. Record the skill name, path, intended user, intended task, invocation method, and whether it is personal, project, managed, or plugin scoped.
  2. Check SKILL.md structure. Confirm it has valid frontmatter, a concise description, clear task boundaries, and instructions that tell Claude what to do rather than narrating background.
  3. Review trigger quality. Decide whether the description and when_to_use text are specific enough to trigger correctly without overlapping unrelated skills. Flag vague, broad, or marketing-like descriptions.
  4. Review invocation control. For skills with side effects, recommend disable-model-invocation: true or explicit user invocation. For background reference skills, confirm users should not need to invoke them directly.
  5. Review tools and execution. Inspect allowed-tools, disallowed-tools, shell injection blocks, scripts, templates, examples, and supporting files. Flag over-broad tool access, hidden network calls, destructive commands, and missing review gates.
  6. Review context cost. Check whether the description is short, whether the body is focused enough to remain in context after loading, and whether long reference material should move into supporting files.
  7. Review helpfulness. Ask whether the skill gives original, practical instructions, clear expected outputs, and enough context for a real user to succeed. Flag thin, duplicate, or unsupported content.
  8. Review safety and privacy. Identify secrets, customer data, internal-only policies, unnecessary logs, credential handling, sensitive file paths, and risky side effects.
  9. Decide. Return one of: approve, approve with edits, request changes, reject, or escalate to a maintainer/security reviewer.

Output contract:

  • Summary: what the skill does and whether it is adoption-ready.
  • Blocking findings: issues that must be fixed before use.
  • Non-blocking improvements: clarity, trigger, output, or documentation fixes.
  • Safety/privacy findings: side effects, permissions, data exposure, and recommended controls.
  • Suggested frontmatter edits: description, invocation control, tools, model, context, paths, or arguments if relevant.
  • Final decision: approve, approve with edits, request changes, reject, or escalate.

Features

  • Reviews SKILL.md frontmatter, body instructions, trigger text, and output expectations.
  • Applies Claude Code skill behavior: descriptions load for discovery, full skill content loads on use, and skills can run inline or in isolated subagent context.
  • Checks least-privilege tool scoping and user-only invocation for side-effecting workflows.
  • Uses helpful-content questions to separate practical skill instructions from thin, duplicate, or unsupported copy.

Use Cases

  • Review a new project skill before merging it into .claude/skills/.
  • Audit a plugin skill before distributing it to other repositories.
  • Decide whether a skill should be automatically model-invoked or manually invoked by users.
  • QA a skill library for overlap, vague descriptions, excessive context cost, or risky supporting files.

Source Notes

  • Claude Code skills are SKILL.md files with YAML frontmatter and markdown instructions. Descriptions help Claude decide when to load a skill, while the full body loads when the skill is used.
  • Official Claude Code guidance distinguishes skills from subagents: skills are reusable instructions or workflows; subagents are isolated workers with their own context. A subagent can preload skills, and a skill can run in a forked context.
  • The Claude Code skills docs document invocation control, tool restrictions, supporting files, dynamic context, subagent execution, and visibility overrides.
  • Google's helpful-content guidance recommends self-assessment for reliability, usefulness, and "Who, How, and Why" clarity; this maps well to QA checks for public or team-distributed skill instructions.

Duplicate Check

Checked content/agents, content/skills, the generated README catalog, and open pull requests for Agent Skill QA Reviewer Agent, skill QA reviewer, SKILL.md review, Agent Skills QA, Claude Code skill review, and the source domains in the issue. Adjacent entries cover skill library curation and enterprise skill governance, but no existing entry provides a concrete agent prompt focused on QA review of an individual Agent Skill before adoption or publication.

Editorial Disclosure

Submitted as an independent source-backed HeyClaude content entry by Desel72. It is based on public Claude Code and Google Search Central documentation. No paid placement, referral, affiliate link, or vendor sponsorship is used.

Sources

Source citations

Add this badge to your README

Show that Agent Skill QA Reviewer Agent is listed on HeyClaude. Paste this Markdown into your README — it renders the badge and links back to this page.

Listed on HeyClaude
[![Listed on HeyClaude](https://heyclau.de/badge/agents/agent-skill-qa-reviewer-agent.svg)](https://heyclau.de/entry/agents/agent-skill-qa-reviewer-agent)

How it compares

Agent Skill QA Reviewer Agent side by side with 2 alternatives on trust, install, platform support, and disclosed safety notes — all from reviewed registry metadata.

1 trust signal differ across this comparison (Submitter).

Field

Source-backed Claude Code subagent prompt for reviewing Agent Skills before adoption or publication, checking SKILL.md scope, descriptions, invocation control, supporting files, tool permissions, helpfulness, safety, and privacy risks against official Claude Code skills guidance.

Open dossier

An agent prompt for curating an organization's Agent Skills: reviewing each SKILL.md name and description, scope (personal, project, or plugin) and precedence, per-skill allowed-tools, and whether Claude or the user invokes it.

Open dossier

Source-backed agent that designs safe recurring Claude Code routines, turning a repeated task into a well-scoped, idempotent skill-driven workflow with clear triggers, permissions, and reporting, grounded in the official Claude Code skills docs.

Open dossier
Next steps
Trust
Review statusNot reviewedNot reviewedNot reviewed
Package trustPackage not verifiedPackage not verifiedPackage not verified
Source provenanceSource-backedSource-backedSource-backed
SubmitterDiffersDesel72JPette1783JPette1783
Install riskReview firstReview firstReview first
Notes Safety ✓ Privacy ✓ Safety ✓ Privacy ✓ Safety ✓ Privacy ✓
Brand
Categoryagentsagentsagents
SourceSource-backedSource-backedSource-backed
AuthorDesel72JPette1783JPette1783
Added2026-06-082026-06-052026-06-05
Platforms
Harness
Source repo
Safety notesThis agent reviews skill quality and adoption readiness; it does not execute the skill, install plugins, run scripts, or approve production rollout by itself. Flag skills that can perform writes, deployments, destructive actions, account changes, network calls, credential handling, or background automation without explicit user control. Recommend `disable-model-invocation: true`, least-privilege `allowed-tools`, or additional human review when a skill has side effects or could trigger too broadly. Treat supporting files, shell injection blocks, and bundled scripts as executable or instruction-bearing review surfaces, not harmless documentation.This agent curates and reviews skills; it does not execute them. Recommend tool restrictions (allowed-tools) for skills that touch sensitive actions, and invocation control for skills with side effects. Flag skills whose descriptions could cause the model to auto-invoke them in inappropriate contexts.This agent designs the routine; running it on a schedule means it acts without a human present, so scope it tightly. Make routines idempotent and bounded so a repeated or retried run cannot cause cumulative damage. Keep destructive or far-reaching steps out of unattended routines, or gate them behind explicit confirmation and least-privilege permissions.
Privacy notesReads local skill instructions and supporting files, which may expose internal workflow names, repository paths, policies, examples, customer data, or credentials accidentally written into prompts. Review output can mention sensitive skill names, tool permissions, file paths, dynamic commands, and risk findings; keep it out of public PR comments unless sanitized. Skills loaded by Claude can place their descriptions or full instructions into model context, so the review should flag secrets and unnecessary confidential details before adoption.Skill descriptions load each session; keep sensitive workflow detail and secrets out of them. Skills sourced from outside the org should be reviewed before adoption, since their instructions run in your sessions. Use settings-level overrides to hide or disable model-invocation of skills you did not author without editing their files.A recurring routine repeatedly sends its context to the model provider; confirm that is acceptable for the data involved. Routine output and logs can accumulate; avoid writing secrets or sensitive data into them. Scope the routine's tools and file access to only what the task requires.
Prerequisites
  • One or more Agent Skill directories with a `SKILL.md` file and any referenced supporting files.
  • Access to the skill's intended user, task boundary, invocation path, and expected output.
  • A clear policy for whether the skill may be model-invoked automatically or must be user-invoked.
  • Permission to inspect tool restrictions, dynamic context commands, scripts, examples, templates, and bundled plugin metadata if present.
  • A set of Agent Skills (personal, project, or plugin) with their SKILL.md files.
  • Knowledge of which skills should be org-wide versus project-specific.
  • Ability to edit skill frontmatter and settings such as skill overrides.
  • A repeated task you want to run on a schedule or trigger with Claude Code.
  • Knowledge of the inputs, outputs, and side effects of that task.
  • Ability to author a skill and set the permissions the routine needs.
Install
Config
Citations
ClaimUnclaimedUnclaimedUnclaimed
Open 3 picks in the interactive comparison tool

Related guides

Signals

Loading live community signals…

More like this, weekly

A short, calm digest of reviewed Claude resources. Unsubscribe any time.