feat(skills): validation and shadowing signals

[k11kirky]

Problem

Skill configurations can have subtle issues — missing descriptions, frontmatter names that don't match their directory, oversized SKILL.md files, or skills being silently shadowed by higher-priority sources — with no feedback to the user. This adds health analysis so these problems are surfaced directly in the Skills UI.

Changes

• Added analyzeSkills, a pure function that inspects a list of SkillInfo objects and returns a map of issues keyed by skill path. It detects four issue types:
  • missing-description — agents use the description to decide when to invoke a skill
  • name-mismatch — frontmatter name differs from the directory name
  • oversized-manifest — SKILL.md exceeds 32 kB, adding context cost on every use
  • shadowed — a higher-precedence source (repo > user > marketplace > bundled) provides a skill with the same name
• Added skillMdBytes to SkillInfo (and its Zod schema) so the file size is available without additional I/O; the discovery layer populates it from the raw file content.
• SkillsView runs analyzeSkills over the loaded skills list and passes the resulting SkillAnalysis down to SkillSection and SkillDetailPanel.
• SkillCard shows a warning icon with a tooltip listing all issue messages when a skill has issues.
• SkillDetailPanel renders each issue as an amber Callout below the skill header.

How did you test this?

• Added unit tests for analyzeSkills covering: healthy skills, missing/whitespace descriptions, name mismatches, oversized manifests, all shadowing precedence pairs, three-way collisions, and multiple issues accumulating on a single skill.
• Updated the existing readSkillMetadataFromDir test to include the new skillMdBytes field in the expected output.

Automatic notifications

• Publish to changelog?
• Alert Sales and Marketing teams?

[k11kirky]

• refactor(skills): apply simplify-pass cleanups across the stack #2612
• feat(skills): Codex unification — bring your skills, use them anywhere #2611
• feat(skills): publish skills to the team and install team skills locally #2610
• feat(skills): PostHog cloud team skills — read path #2609
• feat(skills): skills.sh marketplace browse and install #2608
• feat(skills): validation and shadowing signals #2607 👈 (View in Graphite)
• feat(skills): live refresh from the filesystem #2606
• feat(skills): create, edit, and delete user and repo skills #2605
• feat(skills): render full skill directories #2604
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[github-actions]

React Doctor could not complete this scan.

No React dependency found in /tmp/react-doctor-baseline-rFJRO2/package.json. Add "react" to dependencies (or peerDependencies) and re-run.

_{Reviewed by React Doctor for commit 108c18e.}

[greptile-apps]

Prompt To Fix All With AI

Fix the following 1 code review issue. Work through them one at a time, proposing concise fixes.

---

### Issue 1 of 1
packages/ui/src/features/skills/SkillCard.tsx:78-80
When a skill has multiple issues the tooltip messages are joined with `
`, but HTML collapses whitespace in text nodes, so all messages run together without any visible separator. Radix UI Tooltip renders `content` as a `ReactNode`, so newlines in a plain string don't produce line breaks.

```suggestion
        <Tooltip
          content={
            <Flex direction="column" gap="1">
              {issues.map((issue) => (
                <Text key={issue.type} size="1">
                  {issue.message}
                </Text>
              ))}
            </Flex>
          }
        >
          <Warning size={14} className="shrink-0 text-amber-11" />
        </Tooltip>
```

_{Reviews (1): Last reviewed commit: "feat(skills): validation and shadowing s..." | Re-trigger Greptile}

[k11kirky]

Merge activity

• Jun 12, 11:31 AM UTC: A user started a stack merge that includes this pull request via Graphite.
• Jun 12, 11:32 AM UTC: Graphite couldn't merge this pull request because a downstack PR feat(skills): create, edit, and delete user and repo skills #2605 failed to merge.
• Jun 12, 11:54 AM UTC: A user started a stack merge that includes this pull request via Graphite.
• Jun 12, 12:07 PM UTC: Graphite rebased this pull request as part of a merge.
• Jun 12, 12:19 PM UTC: @k11kirky merged this pull request with Graphite.