Evaluation report

• Repository is reachable

  https://github.com/wrsmith108/varlock-claude-skill @ 348a435 — ★ 28 · MIT · last push 4 months ago

• Manifest detected

  kind=plugin slug=varlock · source=.claude-plugin/plugin.json

• Slug is URL-safe

  "varlock" matches /^[a-z0-9][a-z0-9-]{0,62}$/

• Slug is unique within kind

  No collision found for plugin/varlock

• Version is semver

  1.0.0

• Description quality

  14 words · 116 chars — OK but more detail helps

• README is present and substantial

  2,650 chars · 9 sections · 5 code blocks

• Tags / topics declared

  5 total — claude-code, claude-code-skills, claude-skills, environment-variables, security

• README has usage / example sections

  found: Installation

• Homepage / docs URL declared

  https://skillsmith.app

• LICENSE file at repo root

  LICENSE

• No sensitive files in the repo

  scanned for .env, credentials.json, *.pem, .ssh/, AWS / GCP configs — none found

• Plugin: manifest fields complete

• Plugin: bundled artifacts present

  1 skill

• Plugin: bundle shape

  1 skill

• Plugin: manifest location

  manifest at .claude-plugin/plugin.json (modern convention)

• Recent activitywarn

  last push 4 months ago — looks slowing down

  Consumers prefer artifacts that are actively maintained (threshold: 90 days, configurable via EVAL_RECENCY_PASS_DAYS).

• Tests detectedwarn

  no test/tests/__tests__/spec/t/ dirs, no JVM src/test/, and no JS/TS/Python/Go/Ruby/Elixir test files

  Add tests (even a smoke test). Consumers gauge maintenance quality by their presence.

• CI configuration detectedwarn

  no CI config found (looked for GitHub Actions, CircleCI, GitLab CI, etc.)

  Add a simple workflow (lint + test on PR) — it tells consumers the artifact is built reproducibly.

Behavioral results aren't published for this artifact. The publisher sees the full report on their own dashboard.