clix-skill-creator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited clix-skill-creator (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill to create a new Clix skill that matches a user's need, while avoiding duplicated scope and preventing hallucinated API usage by relying on the Clix MCP server as the source of truth.
This is a “meta-skill”: it does not integrate an SDK directly; it guides you to produce another skill folder (docs + deterministic scripts) that does.
clix-skill-creatorexisting skills (integration + event tracking + personalization + user management + API-triggered campaigns).
via MCP, treat it as unknown and ask the user or add a TODO note.
Before writing any new “Clix API behavior” or “SDK signature” into a newly generated skill:
clix-mcp-server:search_docs to confirm conceptual behavior,limits, and console semantics.
clix-mcp-server:search_sdk to confirm exact method signaturesfor each platform (iOS/Android/Flutter/React Native) that the new skill will mention.
If clix-mcp-server tools are not available:
installer in skills/integration/scripts/install-mcp.sh).
outdated” warning and minimize hard claims.
Clix skill creation progress:
- [ ] 1) Intake: user need → crisp problem statement + acceptance criteria
- [ ] 2) Scope check: confirm this isn’t already covered by existing skills
- [ ] 3) MCP research: gather evidence (docs + SDK signatures) for the target scope
- [ ] 4) Draft a Skill Brief (name, trigger phrases, inputs/outputs, guardrails)
- [ ] 5) Generate scaffold (SKILL.md + references/ + scripts/ + examples/)
- [ ] 6) Validate scaffold (structure + frontmatter + MCP-first section)
- [ ] 7) Wire-in (README + llms index + tests if needed)Ask only what’s needed to define a stable skill boundary:
Before creating a new skill, use the existing official Clix skills in this repo as your style guide so the generated skill matches the standards here (format, tone, workflow, validators), while still being tailored to the user’s need.
references/, scripts/, examples/)If the need is clearly a tiny addition to an existing skill, prefer adding a references/ doc or examples/ file there instead of creating a new skill.
clix-integrationclix-event-trackingclix-user-managementclix-personalizationclix-api-triggered-campaignsCreate a short evidence pack that you will cite while writing the new skill:
clix-mcp-server:search_docs)clix-mcp-server:search_sdk)Store the evidence in your notes (or as a references/ markdown file in the new skill), with the search queries you used so future maintainers can refresh it.
Produce this brief for approval _before_ generating files:
skill:
folder_name: "<kebab-case>" # e.g. "push-troubleshooting"
name: "clix-<kebab-case>" # e.g. "clix-push-troubleshooting"
display_name: "<Title Case>"
short_description: "<short>"
description: "<2-3 lines>"
user_invocable: true
triggers:
- "phrases the user might say"
inputs:
- "minimal inputs the skill will ask for"
outputs:
- "artifacts the skill produces (plan JSON, code changes, checklists)"
guardrails:
- "MCP-first requirements"
- "security / PII constraints"
files_to_generate:
skill_md: true
references:
- "<doc>.md"
scripts:
- "<script>.sh"
examples:
- "<optional>"In this repository, a “complete” skill folder should include:
SKILL.md (with YAML frontmatter; MCP-first; workflow; progressive disclosure)LICENSE.txtreferences/ (markdown docs; not empty)scripts/ (deterministic bash scripts; not empty)examples/ (optional, but recommended when copy/paste code is useful)After generating a new skill folder, validate it:
bash <skill-dir>/scripts/validate-same-scope.sh path/to/installed/skill-creator path/to/new-skill-folder
bash <skill-dir>/scripts/validate-skill-location.sh path/to/new-skill-folder --mode repo
bash <skill-dir>/scripts/validate-skill-scaffold.sh path/to/new-skill-folderThis should check:
skill-creator (project-levelvs user-level), i.e. the new skill folder lives next to the installed skill-creator under the same .../skills/ directory
skills/<name>/ location (for this repo)references/ and scripts/ are present and non-emptySKILL.md has valid frontmatter keysclix-mcp-serverSKILL.md (always loaded)references/ (load when authoring the new skill)examples/ (load when copy/pasting scaffolds)scripts/ (execute directly; do not load into context)references/skill-template.mdreferences/mcp-research-playbook.md~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.