skill-manifest-generator

v2026.09.24

Generate MANIFEST.json files for Agent Skills, providing content integrity verification, file inventory, and external reference tracking.

GitHub
Install command
npx skhub add skillscatalog/skill-manifest-generator
Markdown
SKILL.md

Instructions

Use this skill to generate a MANIFEST.json file for any Agent Skill directory. The manifest provides:

  • Integrity verification - SHA256 hashes for all files and an overall integrity hash
  • File inventory - Complete listing of files with sizes and types
  • External URL detection - URLs found in code that reference external resources
  • Structure analysis - Folder depth, file counts, and organization

When to Use

  • Before publishing a skill to a catalog
  • To verify a skill hasn't been modified
  • To audit external dependencies in a skill
  • To validate skill structure and compliance

How to Use

Run the manifest generator on a skill directory:

Generate a manifest for the skill at /path/to/my-skill

Or to verify an existing manifest:

Verify the manifest for /path/to/my-skill

Output

The generator creates a MANIFEST.json file in the skill root containing:

{
  "$schema": "https://agentskills.io/schemas/manifest.v1.json",
  "manifestVersion": "1.0",
  "generatedAt": "2025-01-15T10:30:00Z",
  "generator": "skill-manifest-generator/1.0.0",
  "skill": {
    "name": "my-skill",
    "version": "1.0.0"
  },
  "integrity": {
    "algorithm": "sha256",
    "hash": "a1b2c3d4..."
  },
  "files": [...],
  "externalReferences": [...],
  "structure": {...}
}

Examples

Generate a manifest:

User: Generate a manifest for the skill at ./pdf-tools
Agent: I'll generate a MANIFEST.json for the pdf-tools skill...
       [Runs generate_manifest.py]
       Created MANIFEST.json with:
       - 12 files inventoried
       - Integrity hash: sha256:abc123...
       - 2 external URLs detected
       - Max folder depth: 2

Verify a manifest:

User: Verify the manifest for ./pdf-tools
Agent: I'll verify the MANIFEST.json matches the current files...
       [Runs generate_manifest.py --verify]
       ✓ All 12 files match their recorded hashes
       ✓ No new untracked files found
       ✓ Integrity hash verified

Limitations

  • Binary files are hashed but not scanned for URLs
  • URL detection uses regex patterns, may have false positives in comments
  • Maximum skill size: 50MB total, 10MB per file
  • Maximum file count: 1000 files
  • Maximum folder depth: 6 levels

Dependencies

  • Python 3.9+
  • PyYAML (for SKILL.md frontmatter parsing)
  • No other external dependencies (uses Python stdlib)
Discovery
Tags

No tags published for this skill.

Version
Latest version metadata

Version

v2026.09.24

Published

Sep 24, 2026

Category

Uncategorized

License

MIT

Source path

skills/skill-manifest-generator

Default branch

main

Latest commit

e83c630

Tree SHA

009a9f0