skill-lint
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@skill-lintlint my skills folder and show warnings"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
skill-lint
Lint agent SKILL.md files and MCP tool schemas.
Agent skills and MCP tools rarely fail loudly. They fail by never being chosen —
a description that never says when to use it, two tools the model can't tell
apart, a schema so verbose it costs you tokens on every single turn. skill-lint
finds those, plus the ones that bite harder: a destructive tool with no
confirmation gate, an unconstrained command parameter, a skill pointing at a
file that isn't there.
Zero dependencies. Runs as a CLI or as an MCP server.
uv tool install skill-lint # or: pipx install skill-lint
skill-lint ~/.claude/skills # lint a skill library
skill-lint --mcp tools.json # lint an MCP tools/list payload
skill-lint . --format github # CI annotationsExample
$ skill-lint ~/.claude/skills
skills/report-writer/SKILL.md
▲ SL007 description never says WHEN to use the skill — Generates polished reports…
→ Add an explicit trigger clause: "Use when …", "Triggers on …". This is the
single most common reason a working skill never gets invoked.
▲ SL011 references a missing file — templates/quarterly.md
→ The model will try to read this and fail.
197 checked · 1 error(s) · 129 warning(s) · 75 infoRelated MCP server: policy-gate-mcp
As an MCP server
// claude_desktop_config.json / .mcp.json
{
"mcpServers": {
"skill-lint": { "command": "skill-lint-mcp" }
}
}Exposes lint_skills and lint_mcp_tools. The server speaks the MCP stdio
protocol directly — no SDK, so it starts in milliseconds and adds nothing to
your dependency tree.
Rules
Skills
Code | Severity | What it catches |
SL001 / SL002 | error | Missing |
SL003 | warn |
|
SL004 | warn | Name isn't kebab-case, or is over 64 chars |
SL005 / SL006 | warn | Description too short to route on / long enough to cost real tokens |
SL007 | warn | Description never says when to use the skill |
SL008 | info | Description written in first person |
SL009 | warn/error | Skill body large enough to bloat every load |
SL010 | error | Frontmatter with no body |
SL011 | warn | Links to or runs a file that doesn't exist |
SL012 | error | Two skills share a name — one silently shadows the other |
SL013 | error | Frontmatter doesn't parse |
SL014 | info | Unrecognised frontmatter keys (usually typos) |
SL016 | warn | Two descriptions so similar the model can't choose between them |
SL007 is the one that matters most. On a real 197-skill library it fired 116 times — most skills describe what they are and never say when to reach for them, so the router never picks them and the author assumes the skill is fine.
Trigger detection is English-first. Descriptions that don't look English are
reported at info rather than warn, since the heuristic can't judge them.
MCP tools
Code | Severity | What it catches |
MC001 | error/warn | Tool has no description, or one too short to route on |
MC002 | warn | Parameter has no description |
MC003 | error | Destructive tool with no confirmation gate |
MC004 | warn | Unconstrained free-form |
MC005 | info | Tool name isn't snake_case |
MC006 | warn | Description long enough to matter, paid every request |
MC007 | warn | Schema has no |
MC008 | info |
|
MC009 | error | Duplicate tool name — one is unreachable |
MC010 | warn | More than ~40 tools; selection accuracy drops |
MC011 | warn | Whole tool list is expensive per request |
MC003 matches the tool name and its opening sentence, not the whole description — a destructive verb in later context ("use before publishing") isn't what the tool does, and matching it turns the rule into noise.
Options
--mcp treat paths as MCP tool-schema JSON
--format text|json|github
--fail-on error|warn|info|never minimum severity that exits non-zero
--select SL007,MC003 only these codes
--ignore SL014 suppress these codesCI
- run: pipx install skill-lint
- run: skill-lint .claude/skills --format github --fail-on warnDevelopment
PYTHONPATH=src python3 -m unittest discover -s tests -vThe test suite includes a dogfood case: this server's own tool schema has to pass its own linter.
Licence
MIT
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
No tool schema history has been recorded yet.
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Lint a SKILL.md for frontmatter, structure, secrets and size. All 6 tools free.
Statically audits MCP tool surfaces for token cost, schema quality, and design issues.
MEOK AGENTS.md Linter MCP — validates the cross-vendor coding-agent spec (Cursor / Claude Code /
Search, fetch, lint, and install Agent Skills (SKILL.md) from the SkillMD registry.
Related MCP Servers
- AlicenseAqualityDmaintenanceStatic security linter for MCP servers. Scans tool definitions for vulnerabilities (path traversal, SQL injection, SSRF), scores description quality, and auto-rewrites descriptions for safer agent tool selection.210MIT
- FlicenseNot gradedqualityBmaintenancePolicy-as-code gate for AI-SDLC, providing MCP tools to review prompts, diff tool manifests, vet MCP servers, and run evaluation suites for LLM agent repos.1-
- AlicenseNot gradedqualityAmaintenanceAudits AI agent skills for safety using static, semantic, adversarial, and supply-chain analysis, providing scores and risk flags. Can be run via CLI, CI, or as an MCP tool from Claude Code, Cursor, and Codex.2Apache 2.0
- AlicenseAqualityBmaintenanceSecurity scanner for third-party AI agent-skill files: SKILL.md manifests, hooks, and bundled scripts, exposed via an MCP tool.1231Apache 2.0
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/0xNagato/skill-lint'
If you have feedback or need assistance with the MCP directory API, please join our Discord server