When the audited component is a skill, also run skill-quality:check (its static
contract gate) when installed, and lean on its findings; absent, this file is the manual fallback.
Read first
SKILL.md frontmatter (description, invocation-control fields) and body.
Any reference/ files and whether the hub points at them with "load when" guidance.
Check
Triggering — is the description the sole auto-discovery driver, front-loaded with real use
cases and trigger phrases, within the listing budget? Under- vs over-triggering; negative
boundaries stated for adjacent intents.
Progressive disclosure — hub thin; detail in reference/; each reference linked with a
one-line load-when pointer. Does the hub stay thin as coverage grows?
Composition — if it orchestrates other skills, is each loaded inline or forked
(context: fork runs the skill body as the prompt for a subagent, which does not get the
conversation history), and does that match what the step needs? Are the named skills real? Are
absent-seam fallbacks stated?
Scope correctness — user vs project vs plugin; does it wrongly depend on
project-specific skills that bias a generic task?
Cloud caveat — if it must run in cloud or routine contexts, note that user-scoped
~/.claude/skills/ is not read there. What those sessions do read is the cloned repository's
.claude/skills/ and plugins the repository's own .claude/settings.json declares; a plugin
enabled only in user settings does not transfer.
Determinism vs prose — does it rely on the model obeying instructions where a deterministic
mechanism (script) would be more reliable?
Gotcha harvest — what did the evidence packet's real usage hit that the skill's own docs do
not carry (improvised workarounds, undocumented escapes, repeatable failure triggers)? General,
non-situational ones are candidate doc additions; name where each belongs.
The context: fork and cloud-scoping claims above are verified 2026-09-06 against Claude Code
2.1.263 and the skills page (https://code.claude.com/docs/en/skills, "Run skills in a subagent"
and "Skills in Cowork and cloud sessions"). Recheck when either section stops carrying its
statement, or when a release note names context: fork or skill loading in cloud sessions.
Reproduce
Invoke it on a realistic prompt; confirm it triggers when it should and follows its own workflow.
1---2name: component-types3description: Auditing a skill4---5# Auditing a skill67When the audited component is a skill, also run `skill-quality:check` (its static8contract gate) when installed, and lean on its findings; absent, this file is the manual fallback.910## Read first1112- `SKILL.md` frontmatter (`description`, invocation-control fields) and body.13- Any `reference/` files and whether the hub points at them with "load when" guidance.1415## Check1617- **Triggering** — is the `description` the sole auto-discovery driver, front-loaded with real use18 cases and trigger phrases, within the listing budget? Under- vs over-triggering; negative19 boundaries stated for adjacent intents.20- **Progressive disclosure** — hub thin; detail in `reference/`; each reference linked with a21 one-line load-when pointer. Does the hub stay thin as coverage grows?22- **Composition** — if it orchestrates other skills, is each loaded inline or forked23 (`context: fork` runs the skill body as the prompt for a subagent, which does not get the24 conversation history), and does that match what the step needs? Are the named skills real? Are25 absent-seam fallbacks stated?26- **Scope correctness** — user vs project vs plugin; does it wrongly depend on27 project-specific skills that bias a generic task?28- **Cloud caveat** — if it must run in cloud or routine contexts, note that user-scoped29 `~/.claude/skills/` is not read there. What those sessions do read is the cloned repository's30 `.claude/skills/` and plugins the repository's own `.claude/settings.json` declares; a plugin31 enabled only in user settings does not transfer.32- **Determinism vs prose** — does it rely on the model obeying instructions where a deterministic33 mechanism (script) would be more reliable?34- **Gotcha harvest** — what did the evidence packet's real usage hit that the skill's own docs do35 not carry (improvised workarounds, undocumented escapes, repeatable failure triggers)? General,36 non-situational ones are candidate doc additions; name where each belongs.3738The `context: fork` and cloud-scoping claims above are verified 2026-09-06 against Claude Code392.1.263 and the skills page (<https://code.claude.com/docs/en/skills>, "Run skills in a subagent"40and "Skills in Cowork and cloud sessions"). Recheck when either section stops carrying its41statement, or when a release note names `context: fork` or skill loading in cloud sessions.4243## Reproduce4445Invoke it on a realistic prompt; confirm it triggers when it should and follows its own workflow.
Run npx skillmds@latest add melodic-software/component-types in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Auditing a skill It is listed under Web & Frontend on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
melodic-software (@melodic-software) published this skill. Their other Agent Skills are listed on their SkillMD profile.