Fineuralab

Review a Nuwa-Style Skill Repository

A GitHub Skill Analyzer example for reviewing Skill structure, scripts, references, assets, and manual inspection gaps.

Worked example

Task context

A repository claims to provide a reusable AI Skill. Before studying or installing it, check whether it has SKILL.md, references, scripts, examples, license information, and maintenance signals.

Input and output

Repository to review

https://github.com/alchaincyf/nuwa-skill
Review target: learn the Skill structure and decide what to inspect before installing or adapting anything.

Manual review queue

Open first: SKILL.md, README, LICENSE.
Inspect next: scripts/, references/, examples/, assets/.
Risk notes: do not run local scripts before reading them; do not treat stars as safety proof; check whether examples include private data or persona claims.

Checks before copying

Treat the analyzer output as a reading queue, not as approval to install.
Open referenced scripts and assets before running or copying them.
Check non-trigger boundaries and privacy notes inside SKILL.md.
Review license and attribution before adapting examples.

Lesson: A Skill repository is both documentation and executable surface. Structure is useful, but manual inspection is still the trust boundary.

Keep working

GitHub Skill AnalyzerAnalyze a public GitHub Skill repository for SKILL.md structure, README signals, maintenance, license, scripts, and common risk patterns directly in the browser. Third-Party AI Skill Safety ChecklistA safety checklist for using third-party AI Skills with files, scripts, credentials, and private data. How to Read SKILL.mdA practical guide to reading SKILL.md files before installing or adapting an AI Skill. How to Review a GitHub Repository Before InstallingCheck repository trust signals, scripts, licenses, maintenance, and external network access before installing. Examples LibraryBrowse worked examples for core browser tools. Workflow HubsBrowse task-based tool workflows.

Reviewed and updated: June 29, 2026