Marketplace Repo Health Check
A parallel six-inspector audit workflow for a Claude Code skills marketplace repo that verifies every serious finding before reporting it by priority.
What it does
Launches a fan-out Dynamic Workflow with six independent inspectors running in parallel:
- Code & script safety — dangerous deletes, secret leaks, hardcoded real paths, bare
except, injection, missing shebangs - Docs / SSOT consistency — version drift across marketplace.json, READMEs, CHANGELOG and git releases; skill counts; broken references
- Security / PII — keyword-free leaks gitleaks can't catch (real names, private domains) and the
.security-scan-passedmarker blind spot - Open-PR triage — worth-merging / needs-changes / decline-as-promotion
- Open-issue triage — real bugs vs skill requests vs promotion
- Marketplace manifest integrity — check scripts, orphans, suite registration
The real value is the discipline afterward: agent findings are treated as hypotheses. Every high/critical item must be re-verified with a one-line command, tagged ✅ real / ⚠️ partly / ❌ false alarm, and delivered as a 6-dimension health table plus 🔴 must-fix / 🟠 backlog / 🟢 optional tiers. It also bakes in hard-won rules: never "fix" a PII leak by listing the real value in a public allowlist, be honest about git-history exposure, never force-push unprompted, and require a version bump for any skill change.
Who it's for
- Maintainers running their own Claude Code skills marketplace repo
- Open-source repo owners who want a pre-release sweep of versions, docs, PRs and issues
- Anyone needing a semantic (not just regex) PII review of a public repo
Examples
- "Run a full audit before I cut the release" → six parallel inspectors, then a prioritized verified report
- "Triage my open PRs and issues" → separates mergeable PRs from promotional ones and flags missing version bumps
- "Is any personal info still exposed publicly?" → catches keyword-free leaks and honestly flags what remains in git history
⚠️ Prerequisites: the Workflow tool,
ghCLI andjq; must run inline (not forked). Each run takes ~15-20 min and 400-500k output tokens.
· · · Install guide · · ·
Try it now, no install
Paste this into Claude to use the skill without installing anything.
Read the instructions in this file and follow them to help me: https://raw.githubusercontent.com/daymade/claude-code-skills/HEAD/marketplace-health-check/SKILL.md What I want: (describe your task here)
If Claude can't open the link, open it yourself and paste the contents instead.
↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.
Install in the Claude app (no terminal)
- Download the ZIP with the button below.
- In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
- Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
Install in Claude Code
Let Claude do it — paste this into Claude Code
Install the skill I found on AI Skill Mart. Copy the marketplace-health-check folder from the GitHub repo daymade/claude-code-skills into my ~/.claude/skills/marketplace-health-check/. When it's done, tell me in one line what this skill can do.
Install with a command instead
git clone https://github.com/daymade/claude-code-skills.git && mkdir -p ~/.claude/skills && cp -r claude-code-skills/marketplace-health-check ~/.claude/skills/⚠ This is a third-party skill. Check the source repository before installing.
- Open a terminal.
- Clone the repo:
git clone https://github.com/daymade/claude-code-skills.git - Create the skills folder if needed:
mkdir -p ~/.claude/skills - Copy the skill in:
cp -r claude-code-skills/marketplace-health-check ~/.claude/skills/ - Confirm the
scripts/andreferences/folders came along — the workflow script and methodology doc are both required. - Verify tooling:
gh auth statusandjq --version. - Restart Claude Code and ask "run a health check on this repo". Confirm the time/token cost it quotes before letting it proceed.