Skill audit report

switch-extension-source Audit report.

Switch a monorepo extension/skill package between its published npm source and its local working-tree source, guaranteeing exactly one source per package. Use when "my edits don't take effect", "load local extension", "test the published npm build", or reconciling dev vs distribution package sources.

EXPERIMENTAL · REVIEWNeeds reviewGenerated Nov 10, 2026Heuristic metadata audit
79
Audit
71
Trust
72
Quality
77
Security
100
Maintain
92
Install

OpenAgentSkill Trust Score

71
Manual review

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

INFO

62

319 GitHub stars

Stars/forks activity

INFO

62

319 stars, 50 forks; issue activity unavailable in current metadata

Recent maintenance

PASS

100

26d since push

License clarity

PASS

86

MIT

README/SKILL.md completeness

PASS

86

Metadata includes enough usage and workflow context

Dependency/runtime risk

INFO

72

command execution surface

Install availability

PASS

92

npx skills add BlackBeltTechnology/pi-agent-dashboard --skill switch-extension-source

Install command safety

PASS

92

standard package or runtime install path

Permission surface

INFO

62

shell or command execution, filesystem or document access

Repository evidence

PASS

86

https://github.com/BlackBeltTechnology/pi-agent-dashboard/tree/develop/.pi/skills/switch-extension-source

Review status

INFO

66

AI review data available

Agent Proven outcomes

INFO

54

No agent outcome data yet

Checks

Install and adoption review

6 Passed · 7 Needs review

Install path

92

PASS

npx skills add BlackBeltTechnology/pi-agent-dashboard --skill switch-extension-source

Repository

88

PASS

https://github.com/BlackBeltTechnology/pi-agent-dashboard/tree/develop/.pi/skills/switch-extension-source

License

86

PASS

MIT

Maintenance

100

PASS

26d since push

AI review

55

CHECK

The script modifies global configuration files (~/.pi/agent/settings.json) which could affect other projects, but it backs up files and is scoped to package entries.

README/SKILL.md completeness

86

PASS

Usable description available

Dependency risk

72

CHECK

command execution surface

Install command safety

92

PASS

standard package or runtime install path

Permission surface

62

CHECK

shell or command execution, filesystem or document access

Stars/forks activity

62

CHECK

319 stars, 50 forks; issue activity unavailable in current metadata

Adoption

68

INFO

319 GitHub stars

Warnings

  • The script modifies global configuration files (~/.pi/agent/settings.json) which could affect other projects, but it backs up files and is scoped to package entries.
  • The skill requires npx tsx as a runtime dependency; this is documented but could be a minor friction point.
  • Quality score needs review

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Compare nearby options

Related skills to audit next