Verify a snapshot
Use the full Skilldrop URL or its snapshot ID. Inspection downloads the manifest and bundle, verifies their checksums, and prints the result.
sk inspect https://skilldrop.dev/s/PL1mY4-
# or
sk inspect PL1mY4-What inspection shows
- Snapshot metadata and the verified bundle checksum.
- Every file path, byte size, SHA-256 digest, and mode.
- A separate warning list for executable files.
Inspection never extracts the bundle and never executes scripts from the skill. Treat the output as a review boundary: understand the instructions and files before installing them.
When to stop
Do not install when the skill includes unexpected executables, asks for credentials it should not need, or contains instructions unrelated to its stated purpose. Ask the sender to explain the snapshot or publish a corrected one.