skill-builder — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-builder (Agent Skill) and scored it 92/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 2 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 2 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
The authoritative skill-authoring guidance ships in this plugin. Read the specific document a decision needs, when that decision is on the table — never read them all up front, because that defeats progressive disclosure and burns context on guidance the current skill does not touch.
${CLAUDE_PLUGIN_ROOT}/skills/guidance/references/${CLAUDE_PLUGIN_ROOT}/skills/guidance/references/skill-building-guidance/Map from decision to governing document (read just-in-time):
| Decision on the table | Read |
|---|---|
| Skill vs. agent vs. hook | plugin-entity-taxonomy.md |
| Use cases, trigger phrases, test cases | skill-building-guidance/use-case-planning.md |
| Directory name, file name, dependency prefix | skill-building-guidance/naming-conventions.md |
The description field (four components, boundaries) | skill-building-guidance/skill-description-frontmatter.md, skill-building-guidance/skill-description-length.md |
| Which frontmatter fields to set | skill-building-guidance/skill-frontmatter-fields.md |
| Where content lives (body vs. references vs. scripts vs. assets) | skill-building-guidance/progressive-disclosure.md, skill-building-guidance/skill-reference-files.md |
| Step structure and workflow shape | skill-building-guidance/workflow-patterns.md, skill-building-guidance/writing-effective-instructions.md |
allowed-tools, Bash permission granularity | skill-building-guidance/allowed-tools-bash-permissions.md, skill-building-guidance/allowed-tools-AskUserQuestion.md |
| Reading config / runtime data | skill-building-guidance/context-injection-commands.md, skill-building-guidance/dynamic-project-discovery.md |
| Running scripts | skill-building-guidance/script-execution-instructions.md |
| Dispatching agents from the skill | skill-building-guidance/agent-dispatch-namespacing.md, plus agent-building-guidelines/multi-agent-economics.md |
| Degraded environments (no git, missing tools) | skill-building-guidance/graceful-degradation.md, skill-building-guidance/optional-git-repositories.md |
| Frontmatter safety (angle brackets, YAML types) | skill-building-guidance/security-restrictions.md |
| Hardening fuzzy steps into deterministic ones | skill-building-guidance/hardening-fuzzy-vs-deterministic.md |
| Splitting or composing skills | skill-building-guidance/skill-decomposition.md, skill-building-guidance/skill-composition.md |
| Defining success and tests | skill-building-guidance/success-criteria-and-testing.md |
| New plugin needed (plugin.json, marketplace.json) | claude-marketplace-and-plugin-configuration/ and templates/ |
about every aspect of the skill until you reach a shared understanding. Walk down each branch of the design tree, resolving dependencies between decisions one-by-one. If a question can be answered by exploring the repository — the target plugin's existing skills, sibling descriptions, `plugin.json`, conventions, the guidance documents above — explore instead of asking. Only surface questions that genuinely require the user's judgment.
let its answer resolve dependent decisions, then ask the next. Later answers routinely make earlier questions moot.
recommended answer with rationale grounded in evidence (existing skills, conventions, the guidance, the user's stated goal). The user can accept, amend, or redirect.
document when a decision is on the table (Step 4), and run a full guidance-conformance pass over the finished files at the end (Step 6). The interview gets each decision approximately right; the review pass makes the artifact correct.
Read the user's argument and the conversation to extract what the skill should do. If the request is too thin to start (for example, just "build a skill"), ask the user for one or two sentences on what the skill should accomplish and what triggers it — nothing else yet.
Confirm the entity type before anything else. Read ${CLAUDE_PLUGIN_ROOT}/skills/guidance/references/plugin-entity-taxonomy.md and apply its decision heuristic. A skill is a deterministic, flowchartable process ("Can I flowchart every path?" → skill). If the work is really contextual judgment with no fixed flowchart, it is an agent — stop and recommend agent-builder. If it fires automatically on an event, it is a hook. If the request bundles a deterministic process and a judgment layer, recommend building them separately and composing them. Only proceed once a skill is the right entity.
Locate the target plugin and learn its conventions before asking the user anything beyond the framing. Use Glob, Grep, and find to gather:
.claude-plugin/plugin.json (name,description, version). If the user has not said which plugin, infer candidates from the repository and confirm the target in Step 4.
{plugin}/skills/*/SKILL.md) — theirdescriptions, frontmatter, step structure, and the trigger space they already own. New descriptions must disambiguate against these siblings in both directions.
CLAUDE.md, AGENTS.md, and any project-discovery.md — repositoryconventions, the documentation root, and how skills are catalogued.
dependencies drive the directory-name prefix and a description mention.
Record what was found (file paths) and what was not. A missing convention is itself a finding that shapes the skill.
Enumerate the decisions the skill needs, in dependency order. Resolve foundational decisions before dependent ones; never ask a dependent question before its parent is settled.
(trigger phrase, workflow, tools, domain knowledge) per use-case-planning.md? What artifact or outcome does each use case produce?
Does it follow the gerund/process-name and dependency-prefix rules? What does the description say across all four components (what, when, boundary, breadth), and how does it disambiguate against siblings in both directions?
context-aware, domain-specific, or a combination)? What are the numbered steps? Where do human gates belong (before irreversible or outward-facing actions only)?
allowed-tools does each step need, at the rightBash granularity? Does the skill dispatch agents (and are they available in this plugin)? Does it run scripts? Does it read runtime config via context injection?
references/(templates, checklists, domain knowledge), in scripts/ (deterministic operations), and in assets/ (output files)? What other frontmatter fields apply (argument-hint, arguments, model, paths)?
Keep each node a concrete decision with a candidate answer. Do not pre-fill the tree with content the user has not confirmed.
For each decision in dependency order:
skills, conventions, and the governing guidance document for this decision (see the map above). If the evidence answers it, record the decision with its evidence and move on — do not ask.
guidance and the evidence available. Read the governing document first so the recommendation is correct, not improvised.
and the alternatives. State what changes depending on the answer. Wait for the answer before asking anything else.
decisions the new answer resolves, and continue.
Keep the interview moving — do not stall on questions the evidence can answer, and do not batch.
Create the skill directory and write the files:
{plugin}/skills/{skill-name}/ (use mkdir). The directory name isthe slash command and must match the frontmatter name.
SKILL.md with:name (matching the directory), the description settled inthe interview, allowed-tools, and any other settled fields. Never put `AskUserQuestion` in `allowed-tools`. No XML angle brackets in any frontmatter value.
Be specific and actionable, embed reasoning in constraints (Always/Never X BECAUSE Y), include error handling for tool-dependent steps, and reference any bundled resource by exact path.
references/, scripts/, or assets/ and their files only if a usecase needs them. Domain knowledge (templates, checklists, matrices) goes in references/; deterministic operations go in scripts/; output-only files go in assets/. Do not create empty or speculative folders.
(.claude-plugin/plugin.json, and a marketplace entry if the repo uses one) per the claude-marketplace-and-plugin-configuration/ guidance and the templates/.
This is the review pass the skill commits to. Re-read each governing document that applies to what you built and verify the finished files against it, applying every fix directly. Do not summarize problems for the user without fixing them. Cover at minimum:
plugin-entity-taxonomy.md) — the skill is genuinely aflowchartable process, not a judgment layer that should be an agent.
skill-description-frontmatter.md, skill-description-length.md)— third person; covers what, when, boundary, and trigger breadth; weaves trigger words into prose rather than appending a keyword list; names sibling skills in boundary clauses; disambiguates in both directions (update the sibling's description if a one-way gap exists); within 1024 characters.
naming-conventions.md) — directory name matches name, is aprocess/gerund name when the output is a plan or doc, carries a dependency prefix when an external tool is required, no README.md in the skill folder, SKILL.md cased exactly.
progressive-disclosure.md, skill-reference-files.md)— body is process only and under 500 lines; domain knowledge is in references/; scripts hold deterministic work; nothing the toolchain already enforces is restated.
writing-effective-instructions.md, workflow-patterns.md)— steps are specific and actionable; constraints embed reasoning; error handling is present; human gates sit only at irreversible actions; the most critical item in each list is placed last.
allowed-tools-bash-permissions.md,allowed-tools-AskUserQuestion.md, security-restrictions.md) — Bash permissions are scoped correctly with separate entries; AskUserQuestion is absent from allowed-tools; no angle brackets or non-standard YAML in frontmatter.
dynamic-project-discovery.md,graceful-degradation.md, optional-git-repositories.md) — the skill discovers project specifics dynamically rather than hardcoding them, and degrades gracefully when a tool or git is absent, where relevant.
agent-dispatch-namespacing.md) — if the skill dispatchesagents, every dispatch uses the qualified defining-plugin:agent-name, and the agents actually exist in an installed plugin.
success-criteria-and-testing.md) — each use case maps to atriggering and functional test the user can run.
Apply the YAGNI discipline throughout: every step, reference file, tool permission, and frontmatter field must earn its place against a real use case. Cut anything added "for completeness" or "for future flexibility."
Summarize for the user:
can validate the skill against the model tier it targets.
Note that plugin entities rarely land in one pass: per iterative-plugin-development.md, plan for 3-5 iterations. Ask whether the user wants to iterate on specific steps or considers the skill ready to test.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.