Is add-new-skills-to-workflow safe to install?

SaferSkills independently audited add-new-skills-to-workflow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

.claude/skills/add-new-skills-to-workflow/SKILL.md · 1 file

.claude/skills/add-new-skills-to-workflow/SKILL.md4.0 KB · Markdown

name: add-new-skills-to-workflow

description: Add new skills to an existing workflow and update all related documentation. Use when user wants to add skills from GitHub URLs to a workflow (e.g., "add this skill to the workflow", "为工作流添加技能"). Triggers on adding skills to workflows, updating workflow documentation after skill additions.

Add New Skills to Workflow

Add skills from GitHub to an existing workflow and update all related documentation.

Workflow

Step 1: Download Skills

Use skill-downloader to download skills from GitHub:

python .claude/skills/skill-downloader/scripts/download_from_github.py <repo-url> <skill-path> --output <workflow-path>/.claude/skills/

Parse GitHub URL:

https://github.com/user/repo/blob/main/path/to/skill → repo: https://github.com/user/repo, skill-path: path/to/skill
https://github.com/user/repo/tree/main/.claude/skills/my-skill → repo: https://github.com/user/repo, skill-path: .claude/skills/my-skill

Example:

# For URL: https://github.com/XIYO/zheon/blob/main/.claude/skills/slidev
python .claude/skills/skill-downloader/scripts/download_from_github.py https://github.com/XIYO/zheon .claude/skills/slidev --output ./workflows/talk-to-slidev-workflow/.claude/skills/

# Use --force to overwrite existing
python .claude/skills/skill-downloader/scripts/download_from_github.py <repo> <path> --output <target> --force

Step 2: Read Downloaded Skill

Read the downloaded SKILL.md to understand:

Skill name and description
What category it belongs to
How it fits into the workflow pipeline

Step 3: Update skill-source.json

Add the new skill entry to workflows/<name>/.claude/skill-source.json:

{
  "skill-name": {
    "source": "https://github.com/user/repo",
    "path": "path/to/skill"
  }
}

Step 4: Update Documentation

Update these files (all that exist for the workflow):

File	Updates Required
`workflows/<name>/.claude/skill-source.json`	Add new skill source entry
`workflows/<name>/README.md`	Skill count, skill table, pipeline
`workflows/<name>/README_cn.md`	Same as above (Chinese)
`workflows/<name>/AGENTS.md`	Available skills list, recommended sequences
`website/content/en/workflows/<name>.mdx`	Skill count, skill table, pipeline
`website/content/zh/workflows/<name>.mdx`	Same as above (Chinese)
`README.md` (root)	Skill count in workflow table
`README_cn.md` (root)	Same as above (Chinese)

Documentation Update Checklist

Skill Count: Update total count (e.g., "18 skills" → "20 skills")

Quick install comment
Section header
Description text

Skill Table: Add new skill row in appropriate category

   | `skill-name` | Brief description of what it does |

Pipeline: Add skill to relevant stage if applicable

   Stage X: Category
   ├── existing-skill → Description
   └── new-skill → Description

AGENTS.md: Add to available skills and update recommended sequences

Root README: Update skill count in workflow overview table

Example: Adding Skills to talk-to-slidev-workflow

Given: Add slidev and slidev-presentations skills

Step 1: Download

python .claude/skills/skill-downloader/scripts/download_from_github.py https://github.com/XIYO/zheon .claude/skills/slidev --output ./workflows/talk-to-slidev-workflow/.claude/skills/
python .claude/skills/skill-downloader/scripts/download_from_github.py https://github.com/clearfunction/cf-devtools skills/slidev-presentations --output ./workflows/talk-to-slidev-workflow/.claude/skills/

Step 2: Read downloaded skills to understand their purpose

Step 3: Update skill-source.json with new skill entries

Step 4: Update all 8 files:

Update skill-source.json with source info
Update skill count
Add new category with skill table
Update pipeline to reference new skills
Update AGENTS.md skill lists and sequences
Update root README skill count

add-new-skills-to-workflow— agent skill

Is add-new-skills-to-workflow safe to install?

Add New Skills to Workflow

Workflow

Step 1: Download Skills

Step 2: Read Downloaded Skill

Step 3: Update skill-source.json

Step 4: Update Documentation

Documentation Update Checklist

Example: Adding Skills to talk-to-slidev-workflow

Audit the pieces. Scan the whole. Decide.