Agent skill · trailofbits
skill-improver
Runs an autonomous review-and-fix improvement loop over a Claude Code skill until a review comes back clean, with a cross-round findings ledger, escalation when fixes stop converging, and a mechanical scope guard. Reviews are performed by the plugin-dev skill-reviewer agent. Use to fix skill quality issues, iteratively refine a skill, or resume a loop after an escalation ('fix my skill', 'improve this skill until it passes review', 'skill improvement loop'). NOT for a one-time review — use the plugin-dev skill-reviewer agent directly.
What it needs
About 5k tokens when loaded.
What this skill does
Skill Improver Improve a Claude Code skill by running /code-improver:improve — a dynamic workflow that loops a reviewer and a fixer subagent until a review reports zero critical/major findings, then strips its own residue. This entry point wires the loop to the plugin-dev:skill-reviewer agent, so the plugin-dev plugin must be installed (marketplace claude-plugins-official). The loop, its ledger, and its guards live in the workflow; this skill resolves the target and relays the outcome. Starting the loop The user provided: $ARGUMENTS (if empty, take the target skill from the conversation). 1. Resolve the skill path 1. If the input ends with /SKILL.md and the file exists, use its directory 2. If the input is a directory containing SKILL.md, use that path 3. Otherwise Glob(pattern="/SKILL.md") and filter by skill name or path substring: Multiple matches: ask the user to choose No matches: report the available skills Single match: proceed 2. Resolve the loop script The loop is the dynamic workflow workflows/improve.js in this plugin. Launch it by path: scriptPath takes a resolved absolute path, and the Workflow tool's name resolves built-in and project workflows, so a marketplace-installed one may not answer to code-improver:improve. Try in order, first hit wins — the home directories come before . so an installed copy beats a checkout of this marketplace: 1. Bash: ls -d -- "${CLAUDEPLUGINROOT}/workflows/improve.js" 2. Bash: ls -d -- "${CODEXPLUGINROOT}/workflows/improve.js" (if that variable is set instead) 3. Bash: find ~/.claude ~/.codex . -maxdepth 7 -path '/code-improver/workflows/improve.js' -print -quit 2>/dev/null Use the path exactly as printed. Its plugin directory — the path with /workflows/improve.js removed — is pluginRoot. If all three come back empty, try {name: "code-improver:improve"} once; if that is unavailable too, stop and say the loop could not be located. Do not assemble a path by hand and do not improvise the loop. 3. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills trailofbits/skill-improver--9d3d60