Skill CleanerCAUTION
Scripts for agents, shared between my repositories.
Overview
Scripts for agents, shared between my repositories.
e7b2fa5dbb6fOBSERVED · 2026-10-23Host compatibility
What the documentation claims. We have not run a compatibility test.
| Host | Status | Notes |
|---|---|---|
| codex | mentioned | |
| openclaw | mentioned |
What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
--- name: skill-cleaner description: "Codex/OpenClaw skill audit: live budget, usage, duplicates, compact descriptions." --- # Skill Cleaner Use this when trimming skill prompt budget, finding duplicate skills, auditing enabled/disabled skill roots, or deciding which skills/plugins to remove. ## Workflow 1. Run the analyzer from this skill directory or repo root: ```bash node --experimental-strip-types skills/skill-cleaner/scripts/skill-cleaner.ts --months 3 ``` Useful variants: ```bash node --experimental-strip-types skills/skill-cleaner/scripts/skill-cleaner.ts --no-logs node --experimental-strip-types skills/skill-cleaner/scripts/skill-cleaner.ts --no-live --no-logs node --experimental-strip-types skills/skill-cleaner/scripts/skill-cleaner.ts --months 6 --max-log-mb 800 --deep-logs node --experimental-strip-types skills/skill-cleaner/scripts/skill-cleaner.ts --context-tokens 272000 --budget-percent 2 --no-logs node --experimental-strip-types skills/skill-cleaner/scripts/skill-cleaner.ts --root ~/Dropbox/boxd/skills --no-logs node --experimental-strip-types skills/skill-cleaner/scripts/skill-cleaner.ts --root ~/.agents/skills --root-only --no-logs ``` 2. Read the report in this order: - `Skill Budget`: live Codex inventory, 2% budget, budgeted usage, and full-description pressure. - `Description candidates`: long descriptions where relaxed grammar saves prompt budget. - `Duplicates`: same skill name or near-identical description/body across Codex, plugin cache, repo siblings, and personal skill roots. - `Unused candidates`: no recent user mention or actual `SKILL.md` read in recent Codex/OpenClaw logs. - `Root summary`: where skills came from and whether config marks them disabled. 3. Before deleting or editing: - Verify the kept copy exists and is loaded. - Prefer deleting repo-local or `agent-scripts` duplicates when Codex built-ins cover them. - Keep repo-local OpenClaw maintainer skills when they encode repo policy or live operations. - Preserve trigger nouns in descriptions: product, tool, action, object. ## Analyzer Notes - By default, `codex debug prompt-input` supplies the exact model-visible skill list, order, names, and aliased paths. `--no-live` forces the broader filesystem fallback. - The broad filesystem scan remains for duplicate, disabled, and archived-cache diagnostics; it is not treated as the loaded inventory. - The script mirrors Codex's model-visible line shape: `- name: description (file: path)`. - It applies Codex-like frontmatter rules: YAML frontmatter only, default name from parent dir, single-line sanitized `name` and `description`. - It follows Codex `core-skills/src/render.rs`: 2% of raw `context_window`, token cost `ceil(utf8_bytes / 4)`, then full descriptions -> equal description truncation -> omitted minimum lines. Alias-table line cost is included. - It reads `~/.codex/models_cache.json` for GPT-5.5 `context_window`; fallback is 272,000 tokens and 2%. - It scans only normal Codex/plugin/repo skill roots by default. Extra folders such as Dropbox archives are included only with `--root <path>`. - `--root-only` requires at least one `--root <path>`, skips the live Codex inventory, and scans only those supplied roots. - It realpath-dedupes roots, so symlinked roots such as `~/.codex/skills/agent-scripts -> ~/Projects/agent-scripts/skills` do not create false duplicates. - For duplicate names, it reports description/body similarity and suggests deletion candidates only when bodies are near copies. Keep priority defaults to direct Codex system skills, then direct Codex skills, then plugin skills, then personal/repo copies. - It scans `~/.codex/history.jsonl` and recent `~/.codex/sessions/**/*.jsonl` by default. Add `--deep-logs` for archived sessions and common OpenClaw/Clawd log folders. - Usage evidence is heuristic: user `$skill`/`use skill` mentions and paths observed in tool-call arguments. ## Output Policy - Suggest first; edit only when the user asks. - If asked to apply cleanup, make small grouped commits: descriptions, deletes, config disables. - Do not delete ignored/untracked skill dirs without naming the destination or confirming they are disposable.
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (5)
skills/autoreview
skills/behavior-validator
skills/birdclaw
skills/crabbox
skills/discrawl
Gates applied: no_behavioural_pass.
e7b2fa5dbb6ffull audit observations/trust-audit/skill/steipete__skill-cleaner.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-23 | e7b2fa5dbb6f | CAUTION | B | 89 | first audit |
Questions
What does the skill-cleaner — steipete/agent-scripts skill do?
Scripts for agents, shared between my repositories.
Is skill-cleaner — steipete/agent-scripts safe to install?
With care. The audit graded it B (89/100) and found 5 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can skill-cleaner — steipete/agent-scripts access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does skill-cleaner — steipete/agent-scripts work with?
Its documentation mentions codex and openclaw. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (e7b2fa5dbb6f), read on 2026-10-23. The repository is watched, and a new audit runs when it changes — this is the first audit.
Add this badge to your README
Shows this page's audit result and links back to it. It updates when the audit does.
[](https://modelsatlas.com/skills/steipete/skill-cleaner/)
Not your listing, or something out of date? Claim or update your listing.