Skip to content
heal-skill logo

Heal Skill

heal-skill

Fix incorrect SKILL.md files when a skill has wrong instructions or outdated API references

SKILL.md

Full skill instructions

<objective> Update a skill's SKILL.md and related files based on corrections discovered during execution.

Analyze the conversation to detect which skill is running, reflect on what went wrong, propose specific fixes, get user approval, then apply changes with optional commit. </​objective>

<context> Skill detection: !`ls -1 ./​skills/​*/​SKILL.md | head -5` </​context>

<quick_start> <workflow>

  1. Detect skill from conversation context (invocation messages, recent SKILL.md references)
  2. Reflect on what went wrong and how you discovered the fix
  3. Present proposed changes with before/​after diffs
  4. Get approval before making any edits
  5. Apply changes and optionally commit </​workflow> </​quick_start>
<process> <step_1 name="detect_skill"> Identify the skill from conversation context:
  • Look for skill invocation messages
  • Check which SKILL.md was recently referenced
  • Examine current task context

Set: SKILL_NAME=[skill-name] and SKILL_DIR=./​skills/​$SKILL_NAME

If unclear, ask the user. </​step_1>

<step_2 name="reflection_and_analysis"> Focus on $ARGUMENTS if provided, otherwise analyze broader context.

Determine:

  • What was wrong: Quote specific sections from SKILL.md that are incorrect
  • Discovery method: Context7, error messages, trial and error, documentation lookup
  • Root cause: Outdated API, incorrect parameters, wrong endpoint, missing context
  • Scope of impact: Single section or multiple? Related files affected?
  • Proposed fix: Which files, which sections, before/​after for each </​step_2>

<step_3 name="scan_affected_files">

ls -la $SKILL_DIR/
ls -la $SKILL_DIR/​references/ 2>/​dev/​null
ls -la $SKILL_DIR/​scripts/ 2>/​dev/​null

</​step_3>

<step_4 name="present_proposed_changes"> Present changes in this format:

**Skill being healed:** [skill-name]
**Issue discovered:** [1-2 sentence summary]
**Root cause:** [brief explanation]

**Files to be modified:**
- [ ] SKILL.md
- [ ] references/[file].md
- [ ] scripts/[file].py

**Proposed changes:**

### Change 1: SKILL.md - [Section name]
**Location:** Line [X] in SKILL.md

**Current (incorrect):**

[exact text from current file]


**Corrected:**

[new text]


**Reason:** [why this fixes the issue]

[repeat for each change across all files]

**Impact assessment:**
- Affects: [authentication/​API endpoints/​parameters/​examples/​etc.]

**Verification:**
These changes will prevent: [specific error that prompted this]

</​step_4>

<step_5 name="request_approval">

Should I apply these changes?

1. Yes, apply and commit all changes
2. Apply but don't commit (let me review first)
3. Revise the changes (I'll provide feedback)
4. Cancel (don't make changes)

Choose (1-4):

Wait for user response. Do not proceed without approval. </​step_5>

<step_6 name="apply_changes"> Only after approval (option 1 or 2):

  1. Use Edit tool for each correction across all files
  2. Read back modified sections to verify
  3. If option 1, commit with structured message showing what was healed
  4. Confirm completion with file list </​step_6> </​process>

<success_criteria>

  • Skill correctly detected from conversation context
  • All incorrect sections identified with before/​after
  • User approved changes before application
  • All edits applied across SKILL.md and related files
  • Changes verified by reading back
  • Commit created if user chose option 1
  • Completion confirmed with file list </​success_criteria>
<verification> Before completing:
  • Read back each modified section to confirm changes applied
  • Ensure cross-file consistency (SKILL.md examples match references/)
  • Verify git commit created if option 1 was selected
  • Check no unintended files were modified </​verification>

More Security skills

supabase logo
Security

supabase

Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...

2.7K 308.9K
View

Comprehensive guides and best practices for Neon Serverless Postgres, covering setup, connection methods, authentication, and platform APIs.

98 216.2K
View

Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.

462 163.8K
View

A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.

462 127.7K
View

Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structured output, and security.

462 125.1K
View

Complete Better Auth server and client setup with database adapters, session management, plugins, and security configuration.

222 118.2K
View

Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. "deploy to vercel", "set up vercel", "add environment variables to vercel".

31.9K 116.1K
View
cloudflare logo
Security

cloudflare

Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-as-code.

3K 110.7K
View

Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.

253 103K
View
gws-gmail logo
Security

gws-gmail

Send, read, and manage Gmail messages, drafts, labels, and account settings.

31.2K 78.9K
View

Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility.

94 72.3K
View
gws-shared logo
Security

gws-shared

Shared authentication, CLI syntax, and output formatting patterns for gws Google Workspace commands.

31.2K 63.4K
View

Security AI tools

StarByFace logo
Security

StarByFace

Discover your celebrity doppelgänger with StarByFace!

Free
View
GeoSpy logo
Security

GeoSpy

GeoSpy: Pricing, Features, FAQs, and Alternatives for AI Teams

Free
View

Detect AI-generated voices to protect against audio fraud.

Paid
View

Ensure Your Content's Originality with AI Plagiarism Checker

Freemium
View
Img Upscaler logo
Security

Img Upscaler

Upscale images by 400% without quality loss

Freemium
View
AICheatCheck logo
Security

AICheatCheck

Accurately Detect AI-Generated Content with TheChecker.AI

Free
View
D
Security

Detect GPT

Chrome extension that detects and flags AI-generated content

Free
View