add-skill — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited add-skill (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
skills/<topic>/SKILL.md — thin wrapper: frontmatter + pointer(s) to knowledge file(s)skills/vercel-ai-gateway/, skills/dexie/, skills/learn/knowledge/<category>/<slug>.md — the actual contente.g. knowledge/rag/concepts.md read by both skills/rag/SKILL.md and skills/pinecone/SKILL.md
/add-skill I want to save the Stripe webhook pattern from this project), treat them as the user's description of what to add and proceed to step 1. If no arguments were given, ask: "What skill or knowledge do you want to add?" and wait for the answer before continuing.skills/ and knowledge/: gh repo clone phucbm/skills /tmp/phucbm-skills 2>/dev/null || git -C /tmp/phucbm-skills pull
find /tmp/phucbm-skills/skills /tmp/phucbm-skills/knowledge -name "*.md" | sortIf a related entry exists, tell the user before proceeding:
"I found a related entry: knowledge/groq/streaming-integration.md — update that instead, or add a new file?"skills/<topic>/SKILL.md — flat, one level onlyknowledge/<category>/<slug>.md — can be nested, shareableSKILL.md: correct frontmatter (name, description, when_to_use, allowed-tools) + instructions to read knowledge file(s) using the ref format belowknowledge/<category>/<slug>.md: full content — env vars, code patterns, gotchas, source reference. Generic patterns only; cite specific projects as examples, never hardcode project-specific data.README.md (add row to knowledge table for each new knowledge file, add row to skills table for each new skill), bump patch version in .claude-plugin/plugin.json, commit and push: git -C /tmp/phucbm-skills add .
git -C /tmp/phucbm-skills commit -m "skill: add <topic>"
git -C /tmp/phucbm-skills pushhttps://github.com/anthropics/skills/blob/main/skills/skill-creator/SKILL.md Key points: description is the primary trigger mechanism — be specific and slightly pushy to avoid undertriggering; keep SKILL.md under 500 lines; use bundled resources for large content.
SKILL.md stays thin — frontmatter + a few lines, content belongs in knowledge/Read [\@/knowledge/<category>/<slug>.md\](/knowledge/<category>/<slug>.md) and apply... Read and apply:
- [@/knowledge/<category>/<slug>.md](/knowledge/<category>/<slug>.md)
- [@/knowledge/<category>/<slug>.md](/knowledge/<category>/<slug>.md)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.