Pre-publish checklist
Ten things we look at when we review a skill, with examples from verdicts we have published. Go through them before your users do.
- Say what it does and when to use it. The
nameanddescriptionin the frontmatter are what the agent and your users read first. The description should match what the skill really does. - Keep allowed-tools narrow.
allowed-toolspre-approves tools.Bash(belt *)lets the agent run anybeltcommand, paid model runs included (we flagged it). Scope it to what the skill needs, such asWebFetch(domain:example.com). - List every script. Name each script in the skill folder and say what it does. A skill that is only instructions is the easiest to trust.
- Say what leaves the machine. If a command uploads files, say which ones. A cloud render that uploads the whole project, assets included, is something users want to know before they run it (example).
- Give prices or a cap for paid calls. If the skill starts paid runs, state the prices or offer a spending limit. media-use refuses any paid call that would go past a credit limit you set, although it tells the agent never to mention prices.
- Tell users how to keep their accounts safe. A browser skill should say to use a throwaway profile, not the everyday logged-in one (agent-browser).
- Ship a license. A LICENSE file in the repo, and in the skill folder too if people copy the folder on its own.
- Give an install command that works. It must match your repo path and folder name. We check it against your README and SKILL.md.
- Credit what you adapted. If you started from someone else's skill, link the original and keep its license. We measure similarity: one copy we reviewed was 96.1% the same as its original (case).
- Date your changes. A changelog or tagged releases show users and reviewers what changed since the last check.
Want a second reader?
The fast-track review (€49) reads your skill with our method, this list included. You get the findings in private first and 7 days to fix them before the verdict goes live. The verdict can go either way.