AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Knowledge Schema Audit

skill-choral-io-choral-skills-knowledge-schema-audit · by choral-io

Use when non-task knowledge needs a read-only check for schema, frontmatter, localization, links, or consistency.

No reviews yet
0 installs
9 views
0.0% view→install

Install

$ agentstack add skill-choral-io-choral-skills-knowledge-schema-audit

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-choral-io-choral-skills-knowledge-schema-audit)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
1mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Knowledge Schema Audit? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Knowledge Schema Audit

Runtime Context

Before acting, resolve ` using the runtime bootstrap rules, then read /.workflow/runtime.md and /.workflow/manifest.yml`; do not assume non-default workflow paths or default ids.

Use this skill to inspect non-task knowledge schema quality. This skill is read-only.

Workflow

  1. Read /.workflow/schemas/common.md.
  2. Read relevant area schemas under /.workflow/schemas/.
  3. Scan /**/*.md.
  4. Exclude workflow infrastructure: /.workflow/** and /.feedback/**.
  5. Exclude delivery surfaces: /tasks/** and /planning/KANBAN.md; task metadata, readiness, dependencies, and Kanban consistency belong to task-metadata-audit.
  6. Exclude local-only state: /workspace/*/local/**.
  7. Parse frontmatter, filenames, links, and localized-file suffixes.
  8. Compare each document to the relevant area schema.
  9. Report findings and dry-run fixes without editing files.

Checks

  • Missing YAML frontmatter.
  • Missing or invalid scope, type, owners, or tags. Treat owners: [] as valid syntax and report it as an ownership gap only when the document type, workflow state, or requested check requires an accountable owner.
  • Ownership metadata that does not use the canonical owners field.
  • Localized files missing lang, canonical, or translation_of.
  • Localized files that link to other localized files by default.
  • Discovery, product, user story, design, test case, metric, experiment, release, or guideline files placed in the wrong area.
  • Assets referenced from Markdown but not stored under a typed /assets/// directory.
  • Decision files with missing supersession metadata when a replacement is obvious.
  • Proposal files with missing or invalid proposal_type, proposal_status, sources, or target metadata.
  • User story files with invalid type, status, actor, relationship, or acceptance-intent metadata.
  • Test case files with invalid type, status, priority, automation, or coverage metadata.
  • Metric files with invalid type, status, source, unit, target, or review-cadence metadata.
  • Experiment files with invalid type, status, hypothesis, metric, guardrail, or result metadata.
  • Release files with invalid status, version, date, validation, rollout, rollback, or follow-up metadata.
  • Member files missing member_id or display_name.
  • Member files that still use legacy groups frontmatter instead of group documents' members lists.
  • Group members entries that point to missing or ambiguous member profiles.
  • Workspace notes that appear to contain project facts that should be promoted.
  • Shared workspace files created under deprecated daily/, inbox/, scratch/, or drafts/ directories.
  • Possible secrets, credentials, private customer data, or private personal notes.

Output

Use the standard audit output shape from references/report.md: Summary, Findings, Dry-run fixes, Requires judgment, Safe after approval, and Sources.

Guardrails

  • Do not edit files.
  • Do not delete or archive documents.
  • Do not rewrite localized content.
  • Do not infer product intent, design intent, or architecture decisions.
  • Stop and report possible sensitive content.

References

  • For report format and fix rules, read references/report.md.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.