Evaluation report
Warningscodebase-audit · skill927834e· 3 months ago
Every check MetaHub ran on this artifact, grouped by area. Static checks run on the source at publish time; behavioral checks run the artifact in a sandbox and judge what it actually does.
Structural
5 passedRepository is reachable
https://github.com/majiayu000/spellbook @ 927834e — ★ 234 · Python · MIT · last push today
Manifest detected
kind=skill slug=codebase-audit · path=skills/codebase-audit · source=SKILL.md
Slug is URL-safe
"codebase-audit" matches /^[a-z0-9][a-z0-9-]{0,62}$/
Slug is unique within kind
No collision found for skill/codebase-audit
Version is semver
0.1.0
Documentation
5 passedDescription quality
172 words · 515 chars — "全面代码库审计 — 自适应并行深度分析(前后端契约、数据完整性、异常处理/安全、架构/技术债、配置/缓存),结构化 findings + 对抗验证 + 基线对比…"
README is present and substantial
23,221 chars · 13 sections · 4 code blocks
Tags / topics declared
20 total — agent-skills, ai-agent-skills, ai-agents, ai-coding-assistant, automation, claude (+14)
README has usage / example sections
found: Quick Start
Homepage / docs URL declared
https://github.com/majiayu000/spellbook#quick-start
Safety
2 passedLICENSE file at repo root
LICENSE
No sensitive files in the repo
scanned for .env, credentials.json, *.pem, .ssh/, AWS / GCP configs — none found
Kind-specific
3 passed1 warningSkill: triggers declaredwarn
No `trigger` phrases in SKILL.md frontmatter
Add `trigger:` lines so Claude knows when to activate this skill — e.g. `when building MCP servers` or `for diagram creation`.
Skill: SKILL.md present
found at skills/codebase-audit/SKILL.md · frontmatter source: SKILL.md
Skill: body content present
1,474 words · 10,223 chars · 19 sections · 1 code block
Skill: allowed-tools scope
no allowed-tools restriction (Claude may use anything)
Maintenance
3 passedRecent activity
last push today
Tests detected
4 test directories · 19 test files
CI configuration detected
GitHub Actions (2 workflows)
Behavioral
Behavioral results aren't published for this artifact. The publisher sees the full report on their own dashboard.