{"owner":"genesiscode2026","slug":"genesis-agent-skills-qa","channel":"genesiscode2026/genesis-agent-skills-qa","version":"1.0.0","artifact_sha256":"981e361b8d27778ad66ec7a75dcca5f4aef21500a378bafd53a72885d0ee8a16","published_at":"2026-09-17T11:28:08.005Z","price_micro":"29000000","update_price_micro":"5000000","resource_endpoint":"https://x402git.com/api/r/genesiscode2026/genesis-agent-skills-qa","version_url":"https://x402git.com/api/v/genesiscode2026/genesis-agent-skills-qa","computed":{"artifact_class":"Pack","component_inventory":[{"kind":"skills","count":3},{"kind":"scripts","count":1},{"kind":"source","count":3},{"kind":"tests","count":2},{"kind":"docs","count":5},{"kind":"config","count":1},{"kind":"assets","count":1},{"kind":"other","count":1}],"file_count":17,"dir_depth":4,"bytes_text":25129,"bytes_binary":6,"languages":{"JavaScript":17562},"tree":[{"path":".gitignore","size":103,"binary":false},{"path":"CHANGELOG.md","size":556,"binary":false},{"path":"LICENSE","size":961,"binary":false},{"path":"QUICKSTART.md","size":1063,"binary":false},{"path":"README.md","size":3044,"binary":false},{"path":"SECURITY.md","size":370,"binary":false},{"path":"VERSION","size":6,"binary":true},{"path":"bin/genesis-skills-qa.js","size":3982,"binary":false},{"path":"package.json","size":641,"binary":false},{"path":"src/index.js","size":336,"binary":false},{"path":"src/packager.js","size":2481,"binary":false},{"path":"src/validator.js","size":8030,"binary":false},{"path":"tests/fixtures/broken_skill/SKILL.md","size":130,"binary":false},{"path":"tests/fixtures/dangerous_skill/SKILL.md","size":249,"binary":false},{"path":"tests/fixtures/valid_skill/SKILL.md","size":369,"binary":false},{"path":"tests/fixtures/valid_skill/scripts/run_analysis.sh","size":81,"binary":false},{"path":"tests/test_validator.js","size":2733,"binary":false}],"readme_html":"

Genesis Agent Skills QA & Packager

\n

Deterministic quality assurance, security auditing, and packaging harness for Agent Skills (SKILL.md) in modern coding-agent ecosystems (Codex CLI, Claude Code, Cursor, Gemini).

\n
\n

1. What Problem Does This Solve?

\n

Teams building custom Agent Skills encounter silent failures in production:

\n\n

genesis-skills-qa deterministically catches these issues in CI or pre-commit before deployment and bundles passing skills into tamper-evident .skill.tar.gz packages with SHA-256 integrity manifests.

\n

2. Who Buys It?

\n\n

3. What Does It Output?

\n\n

4. How Fast Can You Test It?

\n

Under 5 seconds. Run:

\n
./bin/genesis-skills-qa.js ./tests/fixtures/valid_skill\n
\n

5. Why Is This Different From Generic Markdown Linters?

\n

Generic markdown linters only check syntax. genesis-skills-qa is purpose-built for the 2026 Agent Skill standard: it audits token context budgets, verifies executable script references, scans for API key entropy, and prevents dangerous escalation commands from entering agent memory.

\n
\n

Installation & Quickstart

\n
# Verify a skill directory\nnpx genesis-skills-qa ./my-skill\n\n# Run in CI with JSON output and exit code\nnpx genesis-skills-qa ./my-skill --json\n\n# Package verified skill for distribution\nnpx genesis-skills-qa ./my-skill --package --out ./dist/my-skill.skill.tar.gz\n
\n

Diagnostic Rules Evaluated

\n
Rule IDSeverityDescription
SKILL_MD_EXISTSFAILChecks for presence of SKILL.md at root
FRONTMATTER_SCHEMAFAILValidates YAML delimiters and key-value structure
FRONTMATTER_NAMEFAILEnforces non-empty name identifier
FRONTMATTER_DESCFAILEnforces actionable description for agent tool routing
PAYLOAD_BUDGETWARN / FAILFlags context bloat (>15KB warning, >50KB failure)
SECURITY_SECRET_LEAKFAILScans for OpenAI, GitHub, Slack tokens, private keys
SECURITY_DANGEROUS_CMDWARN / FAILDetects destructive commands (rm -rf, sudo, curl|sh)
BROKEN_LOCAL_LINKWARNVerifies existence of local files referenced in markdown
\n

License

\n

Commercial — Genesis Code (genesiscode2026). See LICENSE.

","dependencies":[],"licence":{"verdict":"manual"},"scan":{"verdict":"pass","scanner_version":"2026.09.1","at":"2026-09-17T11:28:11.206Z","checks":[{"id":"secrets","tool":"x402git/secrets","tool_version":"2026.09.1","status":"pass","at":"2026-09-17T11:28:11.206Z","findings":0},{"id":"limits","tool":"x402git/limits","tool_version":"2026.09.1","status":"pass","at":"2026-09-17T11:28:11.206Z","findings":0},{"id":"known_vulns","tool":"osv.dev","tool_version":"2026-09-17","status":"pass","at":"2026-09-17T11:28:11.206Z","findings":0,"packages":0},{"id":"known_malware","tool":"osv.dev/MAL","tool_version":"2026-09-17","status":"pass","at":"2026-09-17T11:28:11.206Z","findings":0,"packages":0},{"id":"dep_behaviour","tool":"socket.dev","tool_version":"2026-09-17","status":"findings","at":"2026-09-17T11:28:11.206Z","findings":1,"packages":1},{"id":"capabilities","tool":"x402git/caps","tool_version":"2026.09.1","status":"findings","at":"2026-09-17T11:28:11.206Z","findings":2},{"id":"injection","tool":"x402git/inject","tool_version":"2026.09.1","status":"pass","at":"2026-09-17T11:28:11.206Z","findings":0}],"findings":[{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"script","severity":"LOW","description":"Ships the script bin/genesis-skills-qa.js","path":"bin/genesis-skills-qa.js"},{"kind":"capability","check":"capabilities","tier":"disclosed","rule_id":"script","severity":"LOW","description":"Ships the script tests/fixtures/valid_skill/scripts/run_analysis.sh","path":"tests/fixtures/valid_skill/scripts/run_analysis.sh"},{"kind":"behaviour","check":"dep_behaviour","tier":"disclosed","rule_id":"missingLockfile","severity":"LOW","description":"Socket SBOM Resolver (transitive) — no lockfile, so installs are not reproducible","package":{"ecosystem":"generic","name":"Socket SBOM Resolver","direct":false,"dev":false},"source":"socket.dev"}],"capabilities":{"tools":[],"runs":[{"path":"bin/genesis-skills-qa.js","kind":"script"},{"path":"tests/fixtures/valid_skill/scripts/run_analysis.sh","kind":"script"}],"hosts":[],"env":[],"install_runs":false,"summary":"runs 2 scripts · nothing runs at install"},"counts":{"blocking":0,"disclosed":3,"review":0}},"cadence_sentence":"One release so far.","originality":{"blob_overlap_ratio":0,"blobs_seen_elsewhere":0,"blobs_total":16,"nearest_listing":null,"derivative_of":null},"engineering":{"unique_5gram_ratio":0.581,"type_token_ratio":0.496,"effective_code_lines":235,"effective_doc_words":646,"code_files":6,"test_files":5,"padding_suspected":true,"class_note":"Capped at Pack: unique 5-gram ratio 0.581 is below the 0.6 guard."},"cadence":{"releases":1,"median_days_between_releases":null,"on_time_fraction":null,"days_since_last":0,"score":null,"finished":false},"inventory_sentence":"3 skills · 1 script · 3 source files · 2 test files","extensions":{"js":5,"md":7,"sh":1,"json":1,"(none)":3},"lines_of_code":404,"warnings":["sbom_unavailable"],"repo_meta":{"repo_id":1374260010,"name":"genesis-agent-skills-qa","full_name":"genesiscode2026/genesis-agent-skills-qa","description":null,"homepage":null,"topics":[],"language":"JavaScript","default_branch":"main","size_kb":11,"created_at":"2026-09-17T10:20:42Z","pushed_at":"2026-09-17T10:20:57Z","licence_spdx":null,"open_issues":null,"stars":null,"forks":null,"watchers":null,"archived":false,"private":true,"html_url":null},"owner":{"login":"genesiscode2026","name":null,"avatar_url":"https://avatars.githubusercontent.com/u/329895054?v=4","bio":null,"blog":null,"company":null,"location":null,"twitter_username":null,"followers":null,"public_repos":6,"created_at":"2026-09-16T08:01:39Z","html_url":"https://github.com/genesiscode2026"},"computed_at":"2026-09-17T11:28:19.965Z","analyzer_version":"0.1.0"},"self_reported":{"description":"Lint and package Agent Skills with 0 config. Validates skill metadata and specifications.","trigger_hint":"When requiring verified Agent Tooling functionality in autonomous workflows"}}