creating-agent-skills-skill — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited creating-agent-skills-skill (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use when creating Agent Skills packages (SKILL.md format) for Codex CLI, GitHub Copilot, or Amp - provides the agentskills.io specification with frontmatter constraints, directory structure, and validation rules
Agent Skills is an open standard for portable AI agent capabilities. One SKILL.md file works across Codex CLI, GitHub Copilot, and Amp.
Official Spec: https://agentskills.io/specification
| Tool | Location |
|---|---|
| Codex CLI | .agents/skills/{skill-name}/SKILL.md |
| GitHub Copilot | .github/skills/{skill-name}/SKILL.md |
| Amp | .agents/skills/{skill-name}/SKILL.md |
#### ```
my-skill/ # Must match frontmatter `name`
├── SKILL.md # Required - main definition
├── scripts/ # Optional - executable code
├── references/ # Optional - additional docs
└── assets/ # Optional - static resources#### Required Fields
---
name: skill-name
description: What it does and when to use it
---#### Optional Fields
---
name: pdf-processing
description: Extracts and processes PDF content. Use for document analysis and text extraction.
license: MIT
compatibility: Requires pdftotext, poppler-utils
allowed-tools: Bash(pdftotext:*) Read Write
metadata:
category: document-processing
version: 1.0.0
---#### ```
✅ Valid: pdf-processing, code-review, data-analysis
❌ Invalid: PDF-Processing (uppercase), -pdf (leading hyphen), pdf--processing (consecutive hyphens)#### ```yaml
# ❌ BAD - Too vague
description: Helps with PDFs
# ❌ BAD - Missing use cases
description: Extracts text from PDFs
# ✅ GOOD - Functionality + use cases
description: Extracts and processes PDF content. Use for document analysis, text extraction, and form data parsing.#### Markdown instructions after frontmatter. No format restrictions, but recommended sections:
---
name: code-review
description: Reviews code for best practices and security issues. Use when analyzing PRs or conducting audits.
---
## Overview
Brief description of capabilities.
## Process
1. Step-by-step workflow
2. With clear actions
## Guidelines
- Bullet points for rules
- Best practices
## Examples
Code samples showing usage.Skills use tiered loading to optimize context:
name + description load at startupSKILL.md loads when selectedKeep `SKILL.md` under 500 lines for efficient context usage.
#### scripts/
#!/usr/bin/env python3
# scripts/extract.py
import sys
# Self-contained with clear dependencies#### Type Guard
function isUser(obj: unknown): obj is User {
return typeof obj === 'object' && obj !== null && 'id' in obj && 'name' in obj;
}#### Use the validation tool:
skills-ref validate ./my-skillname is 1-64 chars, lowercase alphanumeric + hyphensname matches parent directory namedescription is 1-1024 charsdescription includes functionality AND use casesname fieldSKILL.md at directory root#### The SKILL.md format is identical across implementations. To port:
# Codex → Copilot
mv .agents/skills/my-skill .github/skills/my-skill
# Copilot → Codex/Amp
mv .github/skills/my-skill .agents/skills/my-skill~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.