letsloose501

Skill Quality Suite — Security skill for Claude Code

Security community

Quality, security, compatibility and publishing toolkit for AI Agent Skills - lint and validate SKILL.md, scan for secrets and prompt injection, check portability across Claude Code, Codex, Cursor and.

How to install Skill Quality Suite

This entry records only its repository, not the path inside it, so there is no exact command to give. Open letsloose501/skill-quality-suite and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Skill Quality Suite does

Quality, security, compatibility and publishing toolkit for AI Agent Skills - lint and validate SKILL.md, scan for secrets and prompt injection, check portability across Claude Code, Codex, Cursor and Gemini CLI

Alternatives in Security

  • Anthropic Cybersecurity Skills — 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Work 3.8k ★
  • Promptmap — Security scanner for custom LLM apps 1.2k ★
  • Agentseal — Security toolkit for AI agents 344 ★

README

skill-quality-suite

[![quality](https://github.com/letsloose501/skill-quality-suite/actions/workflows/quality.yml/badge.svg)](https://github.com/letsloose501/skill-quality-suite/actions/workflows/quality.yml) [![license: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE) [![python: 3.9+](https://img.shields.io/badge/python-3.9%2B-blue.svg)](https://github.com/letsloose501/skill-quality-suite/actions/workflows/quality.yml) [![no dependencies](https://img.shields.io/badge/dependencies-none-brightgreen.svg)](#install) [![skills.sh](https://skills.sh/b/letsloose501/skill-quality-suite)](https://skills.sh/letsloose501/skill-quality-suite) [![GitHub Marketplace](https://img.shields.io/badge/marketplace-skill--quality--suite-2ea44f?logo=github&logoColor=white)](https://github.com/marketplace/actions/skill-quality-suite)

**A quality, linting, security and validation toolkit for AI Agent Skills.** It validates a `SKILL.md` against the [Agent Skills specification](https://agentskills.io/specification), lints the instructions an agent will actually follow, scans a skill for secrets and prompt injection before you install it, checks whether it will work on another agent, and measures whether it improves the agent's work at all.

No dependencies: the static half is Python standard library only, offline and deterministic. The evaluation half runs an agent, costs money, and never runs unless you name it.

python scripts/sqs.py check    ./my-skill                # skill lint: the everyday five
python scripts/sqs.py security ./my-skill                # before you install a stranger's skill
python scripts/sqs.py compat   ./my-skill --harness all  # will it work anywhere else
python scripts/sqs.py eval     ./my-skill --trigger      # does it actually fire
python scripts/sqs.py explain  ST008                     # what a finding means, and the fix

Use it when:

  • a skill does not fire, fires on a neighbour's work, or half-works and silently skips s