skill-builder — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-builder (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Meta-skill that scaffolds new skills under skills/<category>/<skill-name>/ following SPECS.md. Generates structure; hands off content authoring. Templates and the full validation checklist live in RECIPES.md.
<topic>-architect", or invokes /skill-builder.SPECS.md is canonical. This skill cites and applies the rules; it does not redefine them. Sections it enforces:
UPPER_SNAKE_CASE.md).SKILL.md is terminal; nested SKILL.md forbidden), category placement, personal-skills path-segment rule.If a question isn't answered here, read SPECS.md before guessing.
Never scaffold without an interview. Ask in order; wait for each answer:
<name> matches the SPECS naming convention. Suffix table in RECIPES §5.STACK.md (per SPECS heuristic), what versions? For meta-skills with no library stack, confirm exemption (RECIPES §8).../<path>/SKILL.md links.mattpocock/skills)?Validate against the SPECS naming convention (RECIPES §5). Path follows category placement and the discovery rule: skills/<category>/<name>/SKILL.md. Never nest a SKILL.md inside another skill folder.
If the topic doesn't fit any suffix, propose a new one and update SPECS — don't shoehorn.
One-line description in YAML scalar form. The description sits in Claude's always-loaded skill index — every line costs tokens on every turn, forever.
> or | block scalars.Template + good/bad examples in RECIPES §1.
Generate placeholders, not content. Body discipline (per [SPECS — SKILL.md Format](../../../docs/SPECS.md#skillmd-format)):
RECIPES.md and link with one line: "Skeleton in [RECIPES.md](RECIPES.md)."Standard section shape in RECIPES §2.
Create at scaffold time when the skill will plausibly contain:
Skip when the skill is conceptual (catalog skills like design-patterns, methodology skills like tdd). For those, code snippets stay inline because they illustrate, not implement.
If unsure, write the skill first; factor recipes out when body crosses ~10 KB or a single section's code exceeds half its prose.
Check the SPECS "Which Skills Need a STACK.md" table keyed on parent folder. If yes (or "Depends" with version-sensitive content), generate per RECIPES §3. Exemption rules in RECIPES §8.
Fetching versions: for Go libs, https://proxy.golang.org/<module>/@latest. For Python, https://pypi.org/pypi/<package>/json. For tools, gh api repos/<owner>/<name>/releases/latest. Always pin actual versions, never latest.
Use relative paths from the new skill to its peers (e.g. ../../languages/go-architect/SKILL.md). Standard ties by category in RECIPES §4.
Every new skill requires 4–6 edits to SPECS.md, applied in one pass. Full list in RECIPES §6.
Verify after editing: grep SPECS for the skill name; every mention should make sense in context. Check that no 📋 planned row remains for a skill that now exists.
If adapted from an external source (e.g. Matt Pocock, Anthropic example, community pattern), append the attribution footer (RECIPES §9). Verbatim copies require strict attribution; significantly evolved skills should still credit the origin idea.
Before declaring scaffold done, walk the full checklist in RECIPES §7. If any item fails, fix before handing off.
The scaffold is ready. Content authoring is the next step:
STACK.md row needs a real pinned version (fetch live — don't guess).RECIPES.md, not in SKILL.md. As content lands, audit any code block past ~15 lines and factor it out.Surface the scaffold to the user, summarise what was generated and where, and ask: "Want me to fill in the section content now, or would you prefer to author it yourself?"
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.