skill-creator — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-creator (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Skills are modular packages that extend Claude's capabilities with specialized knowledge, workflows, and tools. They transform Claude from a general-purpose agent into a specialized one equipped with procedural knowledge.
The context window is a public good. Only add context Claude doesn't already have. Challenge each piece: "Does this justify its token cost?"
Prefer concise examples over verbose explanations.
npx clawhub@latest install skill-creatorskill-name/
├── SKILL.md (required)
│ ├── YAML frontmatter (name, description)
│ └── Markdown instructions
└── Bundled Resources (optional)
├── scripts/ - Executable code
├── references/ - Documentation loaded as needed
└── assets/ - Files used in output---
name: skill-name
description: |
WHAT: One sentence describing what this skill does.
WHEN: When to use it (contexts, user phrases).
KEYWORDS: trigger phrases in quotes
---The description is the only thing Claude reads to decide if the skill triggers. Be comprehensive.
Instructions and guidance. Only loaded AFTER skill triggers. Keep under 500 lines.
Executable code for deterministic or repeated tasks.
scripts/rotate_pdf.pyDocumentation loaded into context as needed.
Files used in output, not loaded into context.
Skip only if usage patterns are clearly understood.
Ask:
For each example, identify:
scripts/init_skill.py <skill-name> --path <output-directory>Creates:
scripts/, references/, assets/ directoriesImplement resources first (scripts, references, assets). May require user input for domain-specific content.
Test scripts by running them to ensure no bugs.
Write SKILL.md with:
scripts/package_skill.py <path/to/skill-folder>Validates structure and creates .skill file for distribution.
Use the skill on real tasks. Notice struggles. Update and test again.
Keep SKILL.md lean. Split content when approaching 500 lines.
Pattern 1: High-level guide with references
## Advanced features
- **Form filling**: See [FORMS.md](FORMS.md)
- **API reference**: See [REFERENCE.md](REFERENCE.md)Pattern 2: Domain-specific organization
bigquery-skill/
├── SKILL.md (overview and navigation)
└── references/
├── finance.md
├── sales.md
└── product.mdPattern 3: Framework/variant organization
cloud-deploy/
├── SKILL.md (workflow + selection)
└── references/
├── aws.md
├── gcp.md
└── azure.mdMatch specificity to task fragility:
| Freedom Level | When to Use | Example |
|---|---|---|
| High (text) | Multiple valid approaches | General guidelines |
| Medium (pseudocode) | Preferred pattern exists | Scripts with parameters |
| Low (specific scripts) | Fragile, consistency critical | Exact command sequences |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.