janitor-fix

Skills Janitor

Tinder for your Claude Code skills. Swipe through your collection and delete what's wasting context, in seconds.

Works with Claude Code and OpenAI Codex. 6 commands, zero dependencies.

Status (v1.8, September 2026): maintenance mode. Claude Code now does the core of this natively.

When this project started, nothing in Claude Code told you which skills were eating your context. Now it does:

• /skill-doctor shows what each skill costs in context and how often it gets used, and flags the ones never invoked
• /doctor finds unused skills, MCP servers and plugins against their context cost, and fixes them after asking
• /doctor prompt-audit audits your CLAUDE.md files, skills, agents and commands for outdated or conflicting instructions
• /skills sorts by token count (t) and hides a skill with Space

If you only use Claude Code and only want to trim context, use those. They see real usage from inside the harness, which a plugin never can.

The janitor stays useful for what still isn't built in: security scanning (/janitor-security, plus a pre-install check in /janitor-discover), duplicate detection across skills, OpenAI Codex support, and actually deleting broken symlinks and dead skill folders. Bug fixes and PRs are still welcome. No new features are planned.

Thanks to everyone who installed it, filed issues and sent fixes: #4 of the day on Product Hunt, 120+ stars, and PRs from @nshonda, @lulzpid and @jerryhuangzq-lang. We were early, and now it's native. That's a good ending for a janitor.

Scans every place a skill lives: user, project, codex, and every skill installed via /plugin install — plus your subagents and MCP servers. Surfaces duplicates, broken symlinks, unused skills, and connected-but-never-called MCP servers cluttering your context. Usage counts come from real session transcripts, including skills Claude auto-triggered.

Commands

Each has its own slash command. Or use natural language: "check my skills", "which skills are wasting context?", "find an n8n skill".

Install

/plugin marketplace add khendzel/skills-janitor
/plugin install skills-janitor

Or via skills.sh:

npx skills add khendzel/skills-janitor

Or clone directly:

git clone https://github.com/khendzel/skills-janitor ~/.claude/skills/skills-janitor

Security scan (v1.6)

A skill is text your agent trusts. Public research found prompt injection in roughly a third of tested community skills — so the janitor now scans for the known bad shapes: instruction-override phrases, "don't tell the user" directives, instructions hidden in HTML comments or zero-width unicode, smuggled base64 payloads, and scripts that pipe the network into a shell or read credential stores.

/janitor-security          # audit everything installed
/janitor-discover <url>    # overlap + security check BEFORE installing

Verdicts are honest heuristics (PASS / REVIEW / RISK): a RISK means "read this before trusting it", not "malware". Calibrated for low noise — on a real 178-skill machine it flags 2, both genuinely worth reading.

Swipe through your skills (v1.4)

Tinder-style triage for your skill collection. The deck is sorted heaviest-and-least-used first, so most users hit ← delete through the top 5–10 cards and quit before reviewing everything.

!bash ~/.claude/skills/skills-janitor/scripts/swipe.sh

(The ! prefix runs in your terminal, not the Claude Code Bash tool — the TUI needs a real interactive stdin.)

Controls: ← delete, → keep, ↓ skip, u undo, i inspect full description, q quit.

Plugin skills are flagged for review (you can't rm individual plugin skills — they belong to a plugin). User-scope skills stage for actual deletion, applied on y confirmation at the end.

Since v1.7 the deck also includes your MCP servers — see MCP server triage.

MCP server triage (v1.7)

Skills aren't the only thing renting space in your context. Every connected MCP server loads its tool schemas on every request, whether you call it or not.

The janitor inventories every configured server — user ~/.claude.json, per-project entries, project .mcp.json, and plugin-bundled — then cross-references real usage from your session transcripts (mcp__server__tool records):

=== Skills Janitor - MCP Servers ===
Usage window: last 8 weeks of session transcripts

  Server                       Scope         Calls  Tools Last Used   Origin
  ──────────────────────────── ──────────── ────── ────── ─────────── ────────────
  design-tool                  mcp-user          0      0 never       ~/.claude.json
  deploy-tool                  mcp-plugin        0      0 never       plugin:deploy
  cms                          mcp-project      41      4 2026-07-02  ~/.claude.json

--- Unused in 8 weeks (2) ---
  design-tool (mcp-user) — configured in ~/.claude.json
  deploy-tool (mcp-plugin) — configured in plugin:deploy

No invented token numbers — MCP schemas live server-side, so the janitor reports only what it can prove: where the server is configured, how many distinct tools you actually called, how often, and when last. Servers seen in transcripts but no longer configured are listed separately.

Unused servers rank high in the swipe deck. Swiping one left removes the entry from its config file with a timestamped .bak backup. Plugin-bundled servers are flagged for plugin review instead.

Duplicate detection

The duplicate detector flags cross-scope overlaps, including plugins that re-implement a skill you already had standalone:

=== Skills Janitor - Duplicate Detection ===

--- Description Overlap (Jaccard > 30%) ---

  [98%] marketing-seo-audit <-> marketing-skills:seo-audit
        Scopes: user / plugin

  [100%] marketing-content-strategy <-> marketing-skills:content-strategy
        Scopes: user / plugin

Overlap is scored on descriptions (Jaccard), so it catches re-implementations that share no filename and live in different scopes.

Upgrading from v1.2

The five v1.2 aliases were removed in v1.5. Renames:

Full release notes: CHANGELOG.md.

Requirements

Bash, Python 3, curl. No pip installs, no node modules.

Contributing

PRs welcome. Each command is self-contained in skills/janitor-*/SKILL.md plus a sibling script in scripts/.

License

MIT