skill-creator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-creator (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are an expert at creating effective SKILL.md files for the Local Skills MCP server.
Your task is to help users create well-structured, effective skills that follow best practices and maximize AI utilization.
Every skill must be a file named SKILL.md with YAML frontmatter:
---
name: skill-name
description: Brief description of what this skill does and when to use it
---
Your skill instructions in Markdown format...code-reviewer, api-designer, sql-optimizer[What it does]. Use when [trigger conditions/keywords].Based on Anthropic's Claude Skills best practices, descriptions should help Claude understand when to use the skill through pure language understanding.
✅ DO:
❌ DON'T:
Good Examples:
Poor Examples:
Start by defining the expert role:
You are an expert [domain] specialist with deep knowledge of [specifics].Be explicit about what the AI should do:
Your task is to [specific task].Use numbered or bulleted lists for clarity:
Please analyze the code for:
1. **Correctness**: Does the code work as intended?
2. **Best Practices**: Does it follow conventions?
3. **Performance**: Are there efficiency issues?Include examples when helpful:
Example good commit message:
- "Fix authentication bug in user login flow"
Example poor commit message:
- "Updated files"Specify how you want results formatted:
Provide your review in this format:
- **Summary**: Overall assessment
- **Issues Found**: List of problems
- **Recommendations**: Suggested improvements~/.claude/skills/ # Personal skills (recommended)
├── my-skill/
│ └── SKILL.md
├── another-skill/
│ └── SKILL.md
└── ...Or project-local:
./skills/ # Project/repo skills
├── my-skill/
│ └── SKILL.md
└── ...~/.claude/skills/ for personal skills./skills/ for project-specific skills./.claude/skills/ for project skills with Claude compatibilitymkdir -p ~/.claude/skills/my-skill❌ Pitfall: Description too generic ✅ Fix: Add specific trigger keywords users would mention
❌ Pitfall: Skill instructions too vague ✅ Fix: Break down into specific, numbered steps
❌ Pitfall: No examples provided ✅ Fix: Include 2-3 concrete examples
❌ Pitfall: Trying to do too much in one skill ✅ Fix: Split into focused, single-purpose skills
❌ Pitfall: Forgetting YAML frontmatter delimiters ✅ Fix: Ensure --- appears before and after YAML
Before saving your SKILL.md, verify:
--- and ends with ---name field is lowercase, hyphenated, under 64 charsdescription field is under 1024 chars and includes trigger keywordsSKILL.md (case-sensitive)---
name: commit-message-writer
description: Generates clear, conventional commit messages from git diffs. Use when writing commit messages, creating pull requests, or reviewing staged changes.
---
You are an expert at writing clear, conventional commit messages.
Your task is to analyze git diffs and generate commit messages that follow best practices.
## Commit Message Format<type>: <subject>
<body>
<footer>
## Guidelines
1. **Type**: Use conventional commit types (feat, fix, docs, style, refactor, test, chore)
2. **Subject**:
- Max 50 characters
- Imperative mood ("Add feature" not "Added feature")
- No period at the end
- Capitalize first letter
3. **Body** (optional):
- Explain WHAT and WHY, not HOW
- Wrap at 72 characters
- Separate from subject with blank line
4. **Footer** (optional):
- Reference issues/PRs
- Note breaking changes
## Examples
Good:
feat: Add user authentication via JWT
Implements JWT-based authentication to replace basic auth. Includes token refresh mechanism and secure cookie storage.
Closes #123
Poor:
updated files
When helping users create skills, guide them through the format, ask clarifying questions about their needs, and help them write effective descriptions with proper trigger keywords.
## Validation and Evaluation Workflow
Use these MCP tools to iterate quickly on a skill:
1. **validate_skill** (always available, no external dependencies)
- Checks required frontmatter and formatting rules.
- Reports:
- **Errors**: invalid/missing `SKILL.md`, invalid `name`, invalid `description`, unexpected frontmatter keys.
- **Warnings**: weak descriptions, missing `Use when` trigger phrase, empty body content.
2. **evaluate_skill** (optional, requires external setup)
- Runs Anthropic's Python eval loop (`run_loop.py`) to optimize descriptions using eval data.
- Requirements:
- Python (`python3` or `python`)
- Claude CLI (`claude`) with an authenticated session (OAuth)
- Eval set JSON file (pass `eval_set_path` or place it in a default location)
- Legacy run-loop layouts may additionally require:
- `anthropic` package installed in Python environment
- `ANTHROPIC_API_KEY` environment variable
- Typical inputs:
- `skill_name` (required)
- `eval_set_path` (optional, but required unless a default eval file is found)
- `max_iterations` (optional)
- `num_workers` (optional, defaults to 1 for stable routing measurements)
- `runs_per_query` (optional, defaults to 1)
- `timeout_seconds` (optional, defaults to 120)
- `holdout` (optional, defaults to 0.4; use 0 to disable holdout split)
- `trigger_threshold` (optional, defaults to 0.5)
- `description_override` (optional, evaluate an alternate description without editing SKILL.md first)
- `model` (optional)
Recommended iteration cycle:
- Draft SKILL.md
- Run `validate_skill` until there are no errors
- Improve warnings if possible
- Optionally run `evaluate_skill` to compare/refine description quality~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.