skill-authoring — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-authoring (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill guides you through creating user-facing agent skills. For the canonical reference, see agentskills.io.
A skill is a folder containing a SKILL.md file with metadata and instructions:
my-skill/
├── SKILL.md # Required: instructions + metadata
├── scripts/ # Optional: executable code
├── references/ # Optional: additional documentation
└── assets/ # Optional: templates, resources---
name: skill-name
description: Brief description of what the skill does
---The body contains markdown instructions that tell the agent how to perform the task.
---
name: my-skill
description: Does something useful
---
# Skill Title
Brief overview of what this skill helps accomplish.
## When to Use
Describe scenarios when this skill applies.
## How to Use
Step-by-step instructions or patterns.
## Examples
Concrete examples demonstrating usage.
## Reference
- [Detailed Reference](references/REFERENCE.md) - Link to additional docsStructure skills for efficient context usage:
| Layer | Token Budget | When Loaded |
|---|---|---|
| Metadata | ~100 tokens | At startup (all skills) |
| Instructions | < 5000 tokens | When skill activated |
| References | As needed | On demand |
Executable code that agents can run:
scripts/
├── validate.sh # Validation script
├── generate.py # Code generator
└── setup.js # Setup helperScripts should:
Additional documentation loaded on demand:
references/
├── PATTERNS.md # Common patterns
├── API.md # API reference
└── EXAMPLES.md # Extended examplesKeep individual reference files focused. Smaller files = less context usage.
Static resources:
assets/
├── template.xml # File templates
├── schema.json # Schemas
└── diagram.png # Visual aidsUse relative paths from the skill root:
See [the reference guide](references/REFERENCE.md) for details.
Run the setup script:
scripts/setup.shKeep references one level deep. Avoid deeply nested chains.
.claude/skills/)Skills for contributors working on this codebase:
plugins/*/skills/)Skills for users of the tool:
## Overview
This skill helps you [accomplish X] by [doing Y].| Command | Description |
|---------|-------------|
| `cmd1` | Does X |
| `cmd2` | Does Y |## Examples
### Basic Usage
\`\`\`bash
b2c command --flag value
\`\`\`
### Advanced Usage
\`\`\`bash
b2c command --complex-flag
\`\`\`## When NOT to Use
- Scenario A (use skill-x instead)
- Scenario B (manual approach better)Reference official documentation rather than duplicating it:
## Reference
For complete API documentation, see [Official Docs](https://example.com/docs).Before publishing a skill:
name and description~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.