skill-writer — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-writer (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill to create or refactor skills that stay focused, portable, and easy to discover. The primary workflow should work across assistants, IDEs, CLIs, and chat applications without assuming a specific host.
Use this skill when:
SKILL.mdFirst determine the exact capability the skill should provide.
Keep the scope narrow. One skill should solve one coherent problem.
Pick a concrete <skill-root> that matches the current environment. The skill itself should not assume whether that root is user-level, workspace-level, registry-managed, or tool-managed.
Install the skill under:
<skill-root>/skill-name/If the environment supports multiple installation scopes, choose the scope that matches the user's intent and team-sharing needs.
Every skill needs SKILL.md. Add supporting files only when they improve clarity or reuse.
skill-name/
├── SKILL.md
├── reference.md
├── examples.md
├── scripts/
└── templates/Use supporting files for progressive disclosure. Keep the main SKILL.md readable without hiding core behavior in references.
Use YAML frontmatter with stable, discovery-friendly fields.
---
name: skill-name
description: Brief description of what this does and when to use it
---Frontmatter rules:
name should be lowercase, stable, and directory-aligneddescription should explain both capability and activation contextUse this formula:
[what it does] + [when to use it] + [common triggers]Good descriptions usually include:
Avoid vague descriptions such as "helps with documents" or "useful for coding".
Use these sections when they fit the skill:
OverviewWhen to UseCore WorkflowInputs / AssumptionsExamplesOptional Host NotesValidation ChecklistKeep the primary workflow portable. Put environment-specific behavior in Optional Host Notes or a reference file.
name---
name: pdf-processor
description: Extract text and tables from PDF files, fill forms, merge documents, and OCR scanned pages. Use when working with PDFs, forms, or document extraction tasks.
------
name: code-reader
description: Read and analyze code without making changes. Use for code review, code comprehension, and architecture walkthroughs.
allowed-tools: Read, Grep, Glob
---api-designer/
├── SKILL.md
├── reference.md
└── templates/
└── openapi.yamlSKILL.md exists at <skill-root>/skill-name/SKILL.mdname---Skill does not activate:
Use when... activation clauseMultiple skills conflict:
Skill has structural errors:
When creating or refactoring a skill, produce:
SKILL.md with clean frontmatterUse any linked scripts, assets, reference files, and companion resources mentioned in this document.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.