15Low
The skill lacks defined tool constraints, documentation, and transparency, creating an opaque execution environment that prevents proper security auditing and verification of its runtime behavior.
HygienePackaging & Manifest3 findings
Skill Info
Namemattpocock/skills/improve-codebase-architecture
Registrygithub
Version6eeb81b5fcfe
PURLpkg:github/mattpocock/skills@6eeb81b5fcfe?skill=improve-codebase-architecture
Stars137,192
Installs289,800
Source
Install
GitHub
288,700 installs
Skills.shDocs
npx skills add https://github.com/mattpocock/skillsAssessments (2)
AI Agent Traps ↗Missing usage exampleslowpolicy violation
Skill body contains no code blocks or usage examples, making it harder for users to evaluate.
100% confidence
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "HTML-REPORT.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[HTML-REPORT.md](HTML-REPORT.md)
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Version History (2)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/mattpocock/skills/improve-codebase-architecture)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/mattpocock/skills/improve-codebase-architecture"><img src="https://mondoo.com/ai-agent-security/api/badge/github/mattpocock/skills/improve-codebase-architecture.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/mattpocock/skills/improve-codebase-architecture.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow