writing-skills — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited writing-skills (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A skill is a SKILL.md file that teaches an AI agent a specific technique, workflow, or discipline. This skill defines how to write them well — with proper naming, trigger-rich descriptions, tested content, and no bloat.
skills/
skill-name/
SKILL.md # Required — the skill itself
supporting-file.md # Optional — only for heavy reference (100+ lines)Every skill is a single folder under skills/ containing a SKILL.md with YAML frontmatter.
---
name: skill-name-in-gerund-form
description: [WHAT it does] + [WHEN to use it]. Be specific about triggers.
---
# Skill Title
## Overview
Core principle in 1-2 sentences.
## [Core content — rules, patterns, workflow]
## Red Flags — STOP
Table of rationalizations and correct actions.
## Anti-Patterns
Common mistakes to avoid.Use gerund form (verb + -ing) per Anthropic guidelines:
| Good | Bad |
|---|---|
tracking-tasks | task-tracker |
reviewing-code | code-reviewer |
exploring-in-parallel | parallel-exploration |
preserving-context | context-preservation |
committing-code | commit-helper |
Hard constraints:
anthropic or claudename fieldThe description field is the only thing Claude sees before deciding to load your skill. It must include:
# GOOD — specific triggers, clear purpose
description: Reviews code changes for bugs, performance issues, and security problems. Use when reviewing PRs, before committing, or when user asks to review or check code.
# BAD — vague, no triggers
description: Helps with code quality.
# BAD — describes workflow (Claude will shortcut the body)
description: Fetches PR, groups comments, presents summary, lets user select fixes.Critical: Never summarize the skill's workflow in the description. Claude may follow the description shortcut instead of reading the full skill body.
committing-code skill — it handles README/AGENTS.md update checks)Before marking a skill as done, launch a test subagent:
Task tool with subagent_type="general-purpose":
"Read [skill path] and evaluate:
1. Description quality (WHAT + WHEN + triggers, third person, <1024 chars)
2. Naming (gerund form)
3. No installation section
4. Completeness — any gaps?
5. Token efficiency — any redundancy?"Use model=haiku for fast, cheap testing. Fix issues found, then commit.
Skills should be concise — every token counts when loaded into context:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.