Skill audit report

maintain-prove-it Audit report.

Improve a repo's generated verification skill from what its past runs learned. Works on both kinds made by /create-prove-it, the permanent prove-<app> and a temporary prove-<migration>. Reads the receipts in .prove-it/runs/ (failed and blocked steps, retries, the commands that finally worked, steps that failed for reasons unrelated to the change, how each change was sorted into checks) and any bug that slipped past prove, then fixes drifted steps, writes in the working commands, adds the check that would have caught a slipped bug and a section for any new surface. For a temporary skill it checks whether the migration is done and, if so, suggests the end step. Never rewrites an answer key (spec, snapshot, old system) to match the app. Proves every edit live and reports product bugs without touching product code. Use for /maintain-prove-it, "update the verify skill", "the verifier is out of date", "prove missed this bug", "prove keeps failing on unrelated steps", or after a big merge or

BLOCKED · BLOCKNeeds reviewGenerated Nov 6, 2026Heuristic metadata audit
74
Audit
71
Trust
59
Quality
73
Security
100
Maintain
92
Install

OpenAgentSkill Trust Score

71
Manual review

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

WARN

48

59 GitHub stars

Stars/forks activity

WARN

43

59 stars, 7 forks; issue activity unavailable in current metadata

Recent maintenance

PASS

100

2d since push

License clarity

PASS

86

MIT

README/SKILL.md completeness

PASS

86

Metadata includes enough usage and workflow context

Dependency/runtime risk

INFO

64

credential or environment access, database surface

Install availability

PASS

92

npx skills add ray-amjad/skills --skill maintain-prove-it

Install command safety

PASS

92

standard package or runtime install path

Permission surface

FAIL

24

secrets or environment access, shell or command execution

Repository evidence

PASS

86

https://github.com/ray-amjad/skills/tree/main/skills/maintain-prove-it

Review status

WARN

46

AI review approval is missing

Agent Proven outcomes

INFO

54

No agent outcome data yet

Checks

Install and adoption review

6 Passed · 12 Needs review

Install path

92

PASS

npx skills add ray-amjad/skills --skill maintain-prove-it

Repository

88

PASS

https://github.com/ray-amjad/skills/tree/main/skills/maintain-prove-it

License

86

PASS

MIT

Maintenance

100

PASS

2d since push

AI review

55

CHECK

Review approval is missing

README/SKILL.md completeness

86

PASS

Usable description available

Dependency risk

64

CHECK

credential or environment access, database surface

Install command safety

92

PASS

standard package or runtime install path

Permission surface

24

FIX

secrets or environment access, shell or command execution

Stars/forks activity

43

FIX

59 stars, 7 forks; issue activity unavailable in current metadata

Adoption

68

INFO

59 GitHub stars

Warnings

  • Permission surface may require sandboxing
  • AI review approval is missing
  • Quality score needs review
  • Permission surface needs review: secrets or environment access, shell or command execution
  • GitHub adoption: 59 GitHub stars
  • Stars/forks activity: 59 stars, 7 forks; issue activity unavailable in current metadata
  • Permission surface: secrets or environment access, shell or command execution
  • Review status: AI review approval is missing

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Compare nearby options

Related skills to audit next