Server data from the Official MCP Registry
SKILL.md validator: frontmatter, structure, links, and referenced files checked.
About
SKILL.md validator: frontmatter, structure, links, and referenced files checked.
Security Report
skillcheck is a local, offline SKILL.md validator that uses only file reads and existence checks, with no network calls, shell execution, or dynamic code evaluation. The only notable points are low-severity: the MCP tool accepts any filesystem path without restriction, and the MCP entry point has no error handling around its async startup. Permissions match the stated purpose. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.
9 files analyzed · 8 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-cloudcorprecords-skillcheck": {
"args": [
"-y",
"@reneturcios/skillcheck"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
skillcheck
Is this SKILL.md well-formed? skillcheck answers from the text itself: it parses the frontmatter block, checks the body, walks the markdown links, and compares the headings against the sections a skill is supposed to have — then reports every finding as a coded issue, plus the statistics it collected:
NO_FRONTMATTER— the document does not start with a---lineUNCLOSED_FRONTMATTER— the frontmatter block never closesMISSING_NAME/MISSING_DESCRIPTION— a required frontmatter field is absentBAD_NAME_FORMAT— thenamevalue is not a kebab-case slug (^[a-z0-9]+(-[a-z0-9]+)*$)EMPTY_BODY— nothing but whitespace after the frontmatterMISSING_FILE— a relative link target is not in the caller-supplied list of files that exist next to the skillMISSING_SECTION— a required heading has no matching markdown heading (compared trimmed, case-insensitively, at any heading level)
Links to http://, https://, mailto:, and #anchor
targets are counted but never checked. Relative targets have
any #anchor suffix and surrounding <> stripped before the
file check. Nothing is read from disk and nothing is fetched:
the caller supplies the document text and the file list, so
the same input always gives the same report.
CLI
npx @reneturcios/skillcheck validate --skill SKILL.md --files files.json --sections sections.json
npx @reneturcios/skillcheck --version
files.json and sections.json are each a JSON array of
strings, and both flags are optional. Omitting --files
skips the file check entirely (the report's
stats.files_checked is then false).
Exit codes: 0 whenever the tool ran — a document that fails
validation is a result, not a process failure — 1 on a
runtime error, 2 on a usage error.
MCP server
npx -y @reneturcios/skillcheck mcp
MCP client config:
{
"mcpServers": {
"skillcheck": {
"command": "npx",
"args": ["-y", "@reneturcios/skillcheck", "mcp"]
}
}
}
Tools
validate_skill— Validate a SKILL.md document and report{valid, issues, stats}.content(string, required) — the SKILL.md textavailable_files(array of strings, optional) — relative paths that exist next to the skill; relative links are checked against itrequired_sections(array of strings, optional) — heading texts that must appear as markdown headings
Docker
docker run -i ghcr.io/cloudcorprecords/skillcheck
docker run --rm -v "$PWD:/w" ghcr.io/cloudcorprecords/skillcheck validate --skill /w/SKILL.md
Development
npm install
npm run build # tsc -> dist/
npm test # tsx --test test/*.test.ts (pure local, no network)
npm run dev # run the CLI from source
License
MIT — Copyright (c) 2026 Rene Turcios
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Rea
Freeby Morluto · Developer Tools
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
