Audit claude-skills with systematic 9-phase review: standards compliance, official docs verification, code accuracy, cross-file consistency, and version drift detection. Use when investigating skill issues, major updates detected, skill not verified >90 days, or before marketplace submission.
Installation
Details
Usage
After installing, this skill will be available to your AI coding assistant.
Verify installation:
skills listSkill Instructions
name: skill-review description: | Audit claude-skills repository documentation with systematic 9-phase review: standards compliance, official docs verification via Context7/WebFetch, code examples accuracy, cross-file consistency, and version drift detection. Auto-fixes unambiguous issues with severity classification.
Use when: investigating skill issues, major package updates detected (e.g., v1.x → v2.x), skill not verified >90 days, before marketplace submission, or troubleshooting outdated API patterns, contradictory examples, broken links, version drift.
allowed-tools:
- Read
- Bash
- Glob
- Grep
- WebFetch
- WebSearch
- Edit
- Write
Skill Review Skill
Process
Invoke: /review-skill <skill-name> or use this skill when detecting outdated patterns
Production evidence: better-auth audit (2025-11-08) - found 6 critical issues including non-existent API imports, removed 665 lines incorrect code, implemented v2.0.0
9-Phase Audit
- Pre-Review: Install skill, check version/date, test discovery
- Standards: Validate YAML, keywords, third-person style, directory structure
- Official Docs: WebFetch/Context7 verify API patterns, GitHub updates, npm versions, production repos
- Code Examples: Verify imports exist, API signatures match, schema consistency, templates work
- Cross-File Consistency: Compare SKILL.md vs README.md, bundled resources match files
- Dependencies: Run
./scripts/check-versions.sh, check breaking changes, verify "Last Verified" - Categorize: Severity (🔴 Critical / 🟡 High / 🟠 Medium / 🟢 Low) with evidence (GitHub/docs/npm)
- Fix: Auto-fix unambiguous, ask user for architectural, update all files, bump version
- Verify: Test discovery, templates work, no contradictions, commit with changelog
Automated (via ./scripts/review-skill.sh): YAML syntax, package versions, broken links, TODOs, file org, staleness
Manual (AI): API methods vs docs, GitHub issues, production comparisons, code correctness, schema consistency
Severity Classification
🔴 CRITICAL: Non-existent API/imports, invalid config, missing dependencies
🟡 HIGH: Contradictory examples, inconsistent patterns, outdated major versions
🟠 MEDIUM: Stale minors (>90d), missing docs sections, incomplete errors
🟢 LOW: Typos, formatting, missing optional metadata
Fix Decision
Auto-fix: Unambiguous (correct import from docs), clear evidence, no architectural impact
Ask user: Multiple valid approaches, breaking changes, architectural choices
Version Bumps
- Major (v1→v2): API patterns change
- Minor (v1.0→v1.1): New features, backward compatible
- Patch (v1.0.0→v1.0.1): Bug fixes only
Example: better-auth Audit (2025-11-08)
🔴 CRITICAL #1: Non-existent d1Adapter import from 'better-auth/adapters/d1'
- Evidence: Official docs show drizzleAdapter, GitHub has no d1Adapter export, 4 production repos use Drizzle/Kysely
- Fix: Replaced with
drizzleAdapterfrom'better-auth/adapters/drizzle'
Result: 3 files deleted (obsolete), 3 created (correct patterns), +1,266 lines, v1.0→v2.0, 3.5 hours
Issues Prevented (10)
- Fake API adapters - Non-existent imports
- Stale API methods - Changed signatures
- Schema inconsistency - Different table names
- Outdated scripts - Deprecated approaches
- Version drift - Packages >90 days old
- Contradictory examples - Multiple conflicting patterns
- Broken links - 404 URLs
- YAML errors - Invalid frontmatter
- Missing keywords - Poor discoverability
- Incomplete bundled resources - Listed files don't exist
Bundled Resources
Planning: planning/SKILL_REVIEW_PROCESS.md (complete 9-phase guide)
Scripts: scripts/review-skill.sh (automated validation)
Commands: commands/review-skill.md (slash command, symlinked to ~/.claude/commands/)
Last Verified: 2026-01-06 | Version: 1.0.0
More by jezweb
View allSelf-hosted auth for TypeScript/Cloudflare Workers with social auth, 2FA, passkeys, organizations, RBAC, and 15+ plugins. Requires Drizzle ORM or Kysely for D1 (no direct adapter). Self-hosted alternative to Clerk/Auth.js. Use when: self-hosting auth on D1, building OAuth provider, multi-tenant SaaS, or troubleshooting D1 adapter errors, session caching, rate limits.
/review-skill - Skill Audit Command: Comprehensive skill documentation audit with automated checks and manual review phases.
Build rich text editors with Tiptap - headless editor framework with React and Tailwind v4. Covers SSR-safe setup, image uploads, prose styling, and collaborative editing. Use when creating blog editors, comment systems, or Notion-like apps, or troubleshooting SSR hydration errors, typography issues, or image upload problems.
Run LLMs and AI models on Cloudflare's GPU network with Workers AI. Includes Llama 4, Gemma 3, Mistral 3.1, Flux images, BGE embeddings, streaming, and AI Gateway. Handles 2025 breaking changes. Use when: implementing LLM inference, images, RAG, or troubleshooting AI_ERROR, rate limits, max_tokens, BGE pooling.
