Skill audit report

cherry-skill-marketplace Audit report.

当用户明确要求搜索、安装、查看、卸载或创建 Skill,或内置 Skill / 工具出现能力缺口、无法完成当前任务时触发。通过 `mcp__skills__search_skills` 搜索并用 `mcp__skills__install_skill` 安装;已安装 Skill 的查看和删除通过产品清单导航到 Skills UI;没有合适结果时调用内置 `skill-creator` 创建并验证自定义 Skill,再继续原任务。普通任务仍先尝试内置能力。

REVIEWED · ALLOWSafe to tryGenerated Nov 8, 2026Heuristic metadata audit
89
Audit
87
Trust
90
Quality
89
Security
88
Maintain
92
Install

OpenAgentSkill Trust Score

87
Production candidate

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

PASS

100

51K GitHub stars

Stars/forks activity

PASS

97

51K stars, 4.8K forks; issue activity unavailable in current metadata

Recent maintenance

PASS

88

3mo since push

License clarity

PASS

86

AGPL-3.0

README/SKILL.md completeness

PASS

86

Metadata includes enough usage and workflow context

Dependency/runtime risk

PASS

90

no major dependency risk hints in public metadata

Install availability

PASS

92

npx skills add CherryHQ/cherry-studio --skill cherry-skill-marketplace

Install command safety

PASS

92

standard package or runtime install path

Permission surface

PASS

100

no high-risk permission surface in public metadata

Repository evidence

PASS

86

https://github.com/CherryHQ/cherry-studio/tree/main/resources/builtin-agents/cherry-assistant/.claude/skills/cherry-skill-marketplace

Review status

PASS

88

AI review data available

Agent Proven outcomes

INFO

54

No agent outcome data yet

Checks

Install and adoption review

11 Passed · 0 Needs review

Install path

92

PASS

npx skills add CherryHQ/cherry-studio --skill cherry-skill-marketplace

Repository

88

PASS

https://github.com/CherryHQ/cherry-studio/tree/main/resources/builtin-agents/cherry-assistant/.claude/skills/cherry-skill-marketplace

License

86

PASS

AGPL-3.0

Maintenance

88

PASS

3mo since push

AI review

88

PASS

Approved with no listed issues

README/SKILL.md completeness

86

PASS

Usable description available

Dependency risk

90

PASS

no major dependency risk hints in public metadata

Install command safety

92

PASS

standard package or runtime install path

Permission surface

100

PASS

no high-risk permission surface in public metadata

Stars/forks activity

97

PASS

51K stars, 4.8K forks; issue activity unavailable in current metadata

Adoption

88

PASS

51K GitHub stars

Warnings

No major warnings from available metadata.

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Compare nearby options

Related skills to audit next