| commands | Comma-separated list of commands to run (e.g. 'check,audit,lint'). Overrides individual command flags when set. | — | "" |
| check | Run the check command (version drift detection) | — | true |
| audit | Run the audit command (security & hallucination detection) | — | false |
| lint | Run the lint command (metadata validation) | — | false |
| budget | Run the budget command (token cost analysis) | — | false |
| policy | Run the policy check command (organizational rule enforcement) | — | false |
| verify | Run the verify command (semver bump validation) | — | false |
| test | Run the test command (eval test suites) | — | false |
| fingerprint | Run the fingerprint command (generate skill fingerprint registry) | — | false |
| usage | Run the usage command (analyze skill usage from telemetry) | — | false |
| audit-fail-on | Audit severity threshold: critical, high, medium, low | — | high |
| lint-fail-on | Lint level threshold: error, warning | — | error |
| budget-max-tokens | Budget token ceiling — fail if total exceeds this value | — | "" |
| policy-file | Path to .skill-policy.yml for the policy command | — | "" |
| policy-fail-on | Policy severity threshold: blocked, violation, warning | — | blocked |
| usage-store | Telemetry store URI for the usage command (e.g. file://telemetry.jsonl or sqlite://telemetry.db) | — | "" |
| usage-check-policy | Cross-reference usage data against skill policy | — | false |
| skills-dir | Directory containing skill files to analyze | — | . |
| registry | Path to the skills-check.json registry file | — | skills-check.json |
| node-version | Node.js version to use | — | 22 |
| open-issues | Open or update a GitHub issue when staleness is detected | — | true |
| issue-label | Label used for issue deduplication | — | skill-staleness |
| fail-on-stale | Exit with non-zero code when stale products are found | — | false |
| token | GitHub token (needs issues: write permission) | — | ${{ github.token }} |