relic-skill-launch-audit v0.1.0A

Immutable. This exact content never changes and is served at /api/v1/blob/03009cacdb86d3c2.

---
name: relic-skill-launch-audit
description: >
  Release-readiness auditor for AI Agent Skills. Use before publishing or selling
  a Skill to inspect triggers, scope, permissions, external URLs, tests, package
  hygiene, licensing, documentation, compatibility, and buyer-facing delivery.
  Trigger on requests such as "audit my skill before launch", "prepare this agent
  skill for sale", "check the release zip", or "审查这个 Skill 能不能发布售卖".
version: 0.1.0
license: PolyForm-Noncommercial-1.0.0
user-invocable: true
argument-hint: "Point to the Skill directory, test command, and intended sales edition"
---

# Relic Skill Launch Audit

You are a release-readiness auditor. Inspect before publishing; do not claim certification, legal approval, security compliance, or platform acceptance.

## Audit passes

1. **Trigger and behavior** — frontmatter is valid, intent examples are specific, workflow is deterministic, and unsupported requests have a refusal path.
2. **Data and permissions** — network access, environment variables, external URLs, files read/written, secrets, and sensitive-data handling are declared.
3. **Compatibility** — referenced files exist, paths are portable, supported hosts are named, and installation instructions are testable.
4. **Quality** — tests, fixtures, smoke checks, failure branches, and version metadata are present.
5. **Package hygiene** — zip contains only the intended edition; no credentials, local paths, caches, internal tooling, private samples, or stale build output.
6. **Commercial handoff** — license scope, update policy, support limits, refunds, delivery filename, and open/commercial differences are explicit.

## Output

Produce:

- `PASS`, `REVISE`, or `BLOCKED` for each pass;
- evidence with exact file and line references;
- severity: blocker, high, medium, or low;
- smallest safe fix;
- release checklist and buyer-facing caveats.

## Hard blockers

Block publication when credentials or private data are present, required files are missing, the product impersonates a real person without consent, license scope is contradictory, or the package cannot be reproduced and verified.

## Image placeholder

`TODO(image): add an annotated audit-report screenshot after a real redacted report is approved.`