skill-improver
Iteratively refines Claude Code skills through automated review-fix cycles until quality standards are met.
- Runs repeated skill-reviewer assessments and applies fixes in a continuous loop, stopping only when critical and major issues are resolved
- Categorizes issues by severity: critical (missing frontmatter, broken paths), major (weak triggers, missing guidance sections), and minor (style preferences requiring individual evaluation)
- Requires the
plugin-devplugin and works exclusively on SKILL.md files within skill directories - Best suited for multi-issue skills or new skills needing systematic refinement; use
/skill-reviewerdirectly for one-time reviews
Skill Improvement Methodology
Iteratively improve a Claude Code skill using the skill-reviewer agent until it meets quality standards.
Prerequisites
Requires the plugin-dev plugin which provides the skill-reviewer agent.
Verify it's enabled: run /plugins — plugin-dev should appear in the list. If missing, install from the Trail of Bits plugin repository.
Core Loop
- Review - Call skill-reviewer on the target skill
- Categorize - Parse issues by severity
- Fix - Address critical and major issues
- Evaluate - Check minor issues for validity before fixing
- Repeat - Continue until quality bar is met
When to Use
More from trailofbits/skills
ask-questions-if-underspecified
Clarify requirements before implementing. Use when serious doubts arise.
4.2Ksemgrep
>-
3.8Kmodern-python
Configures Python projects with modern tooling (uv, ruff, ty). Use when creating projects, writing standalone scripts, or migrating from pip/Poetry/mypy/black.
3.8Kcodeql
>-
3.6Kinsecure-defaults
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
3.5Ksecure-workflow-guide
Guides through Trail of Bits' 5-step secure development workflow. Runs Slither scans, checks special features (upgradeability/ERC conformance/token integration), generates visual security diagrams, helps document security properties for fuzzing/verification, and reviews manual security areas.
3.4K