creating-skills — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited creating-skills (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill provides guidance for creating effective skills.
Skills are modular, self-contained packages that extend Claude's capabilities by providing specialized knowledge, workflows, and tools. Think of them as "onboarding guides" for specific domains or tasks—they transform Claude from a general-purpose agent into a specialized agent equipped with procedural knowledge that no model can fully possess.
The context window is a public good. Skills share the context window with everything else Claude needs: system prompt, conversation history, other Skills' metadata, and the actual user request.
Default assumption: Claude is already very smart. Only add context Claude doesn't already have. Challenge each piece of information: "Does Claude really need this explanation?" and "Does this paragraph justify its token cost?"
Prefer concise examples over verbose explanations.
Match the level of specificity to the task's fragility and variability:
High freedom (text-based instructions): Use when multiple approaches are valid, decisions depend on context, or heuristics guide the approach.
Medium freedom (pseudocode or scripts with parameters): Use when a preferred pattern exists, some variation is acceptable, or configuration affects behavior.
Low freedom (specific scripts, few parameters): Use when operations are fragile and error-prone, consistency is critical, or a specific sequence must be followed.
Think of Claude as exploring a path: a narrow bridge with cliffs needs specific guardrails (low freedom), while an open field allows many routes (high freedom).
Every skill consists of a required SKILL.md file and optional bundled resources:
skill-name/
├── SKILL.md (required)
│ ├── YAML frontmatter metadata (required)
│ │ ├── name: (required)
│ │ └── description: (required)
│ └── Markdown instructions (required)
└── Bundled Resources (optional)
├── scripts/ - Executable code (Python/Bash/etc.)
├── references/ - Documentation intended to be loaded into context as needed
└── assets/ - Files used in output (templates, icons, fonts, etc.)#### SKILL.md (required)
Every SKILL.md consists of:
name and description fields. These are the only fields that Claude reads to determine when the skill gets used, thus it is very important to be clear and comprehensive in describing what the skill is, and when it should be used.#### Bundled Resources (optional)
##### Scripts (scripts/)
Executable code (Python/Bash/etc.) for tasks that require deterministic reliability or are repeatedly rewritten.
scripts/rotate_pdf.py for PDF rotation tasks##### References (references/)
Documentation and reference material intended to be loaded as needed into context to inform Claude's process and thinking.
references/finance.md for financial schemas, references/api_docs.md for API specifications##### Assets (assets/)
Files not intended to be loaded into context, but rather used within the output Claude produces.
assets/logo.png for brand assets, assets/slides.pptx for PowerPoint templates#### What to Not Include in a Skill
A skill should only contain essential files that directly support its functionality. Do NOT create extraneous documentation or auxiliary files, including:
The skill should only contain the information needed for an AI agent to do the job at hand.
Skills use a three-level loading system to manage context efficiently:
Keep SKILL.md body under 500 lines. Split content into separate files when approaching this limit.
Key principle: When a skill supports multiple variations, keep only the core workflow in SKILL.md. Move variant-specific details into separate reference files.
Skill creation involves these steps:
To create an effective skill, clearly understand concrete examples of how the skill will be used. For example, when building an image-editor skill, relevant questions include:
Conclude this step when there is a clear sense of the functionality the skill should support.
To turn concrete examples into an effective skill, analyze each example by:
Example: When building a pdf-editor skill to handle queries like "Help me rotate this PDF," the analysis shows:
scripts/rotate_pdf.py script would be helpful to store in the skillWhen creating a new skill from scratch, always run the init_skill.py script:
python3 scripts/init_skill.py <skill-name> --path <output-directory>The script:
scripts/, references/, and assets/Remember that the skill is being created for another instance of Claude to use. Include information that would be beneficial and non-obvious to Claude.
#### Frontmatter
Write the YAML frontmatter with name and description:
name: The skill name (gerund form preferred: deploying-*, creating-*, fetching-*)description: This is the primary triggering mechanism for your skillCRITICAL: Description = When to Use, NOT What It Does
The description should ONLY describe triggering conditions. Do NOT summarize the skill's process or workflow in the description.
Why this matters: When a description summarizes the skill's workflow, Claude may follow the description instead of reading the full skill content. A description saying "dispatches subagent per task with code review" caused Claude to do ONE review, even though the skill body specified TWO reviews. When changed to just triggering conditions, Claude correctly read and followed the full skill.
# BAD: Summarizes workflow - Claude may follow this instead of reading skill
description: Use when executing plans - dispatches subagent per task with code review
# BAD: Too much process detail
description: Use for TDD - write test first, watch it fail, write minimal code
# GOOD: Just triggering conditions
description: Use when executing implementation plans with independent tasks
# GOOD: Triggering conditions with exclusion
description: |
Use when users need to create new documents or work with tracked changes.
NOT when converting between formats (use converting-documents skill).Description checklist:
#### Body
Write instructions for using the skill and its bundled resources.
Once development is complete, package the skill:
python3 scripts/package_skill.py <path/to/skill-folder>The packaging script will:
After testing the skill, users may request improvements. Iteration workflow:
Run: python3 scripts/verify.py
Expected: ✓ creating-skills valid
To validate another skill:
python3 scripts/verify.py /path/to/skill-folderpython3 scripts/verify.py /path/to/skill --verboseSee references/design-patterns.md for workflow patterns and MCP output discipline guidelines.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.