thedaviddias/skill-check

Validate agent SKILL.md files in CI with optional security scanning.

Trust Signals

name	description	required	default
path	Target path passed to `skill-check check`.	no	.
cli-version	npm version for `npx skill-check@...`.	no	latest
config	Optional config path passed as `--config`.	no	""
format	Output format (`text`, `json`, or `sarif`).	no	text
fix	Apply safe auto-fixes with `--fix`.	no	false
fail-on-warning	Exit non-zero when warnings exist.	no	false
strict	Treat warnings as errors.	no	false
lenient	Disable selected strict rules.	no	false
security-scan	Enable security scan in the check command.	no	false
security-scan-runner	Security scan runner (`auto`, `local`, `uvx`, `pipx`).	no	auto
security-scan-install-policy	Install policy for security scan dependencies (`deny`, `allow`).	no	deny
security-scan-paths	Comma-separated scan paths for security scan.	no	""
security-scan-skills	Comma-separated skills paths for security scan.	no	""
sarif-file	SARIF file path when `format=sarif`.	no	skill-check.sarif.json

name	description
exit-code	CLI process exit code.
sarif-file	Absolute SARIF path when `format=sarif`, otherwise empty.
command	Full executed command for debugging.