Install
$ agentstack add skill-alex-voloshin-dev-ai-skills-asset-validation ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
Asset Validation
Validate Windsurf-native AI assets before considering the package complete.
Scope
Validate:
- Root or scoped
AGENTS.md .windsurf/skills/*/SKILL.md- Companion markdown resources for skills
- shared template resources under
.windsurf/skills/ai-skills/templates/* - shared checklists under
.windsurf/skills/ai-skills/checklists/* - explicit support scripts used by the Windsurf package, including
.windsurf/hooks/scripts/*
Do not use this skill for application linting, unit tests, or runtime deployment checks.
Validation Layers
1. Structure
Confirm:
- The asset is stored in the correct directory
SKILL.mdlives under.windsurf/skills//- Companion resources are colocated with their skill or stored in a documented shared resource folder
- The package does not introduce unsupported runtime assumptions
2. Content Rules
Confirm:
- English only
- No secrets or credentials
- No broken references
- No Claude-only runtime instructions
- Instructions are concrete and scoped
3. Frontmatter
For SKILL.md:
namepresentdescriptionpresent and specific- Any optional fields are valid and necessary
For AGENTS.md, templates, and checklists:
- No YAML frontmatter unless there is a clear reason
4. Dependency Integrity
Check:
- References to
AGENTS.md - References to
.windsurf/skills// - References to shared templates and checklists under
.windsurf/skills/ai-skills/ - References to local scripts
Flag missing targets and orphaned assets that no workflow will discover.
5. Token Discipline
Check:
SKILL.mdfiles are concise enough for progressive disclosureAGENTS.mdfiles do not bury critical policy in long prose- Reference material is moved out of hot-path assets when appropriate
Report Format
Return:
- Summary
- Passed checks
- Findings
- Required follow-up
Use validation-checklist.md for the detailed checklist and script patterns.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: alex-voloshin-dev
- Source: alex-voloshin-dev/ai-skills
- License: MIT
- Homepage: https://voloshin.net
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.