Skill Creator Plus — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Skill Creator Plus (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
Aggregate score unchanged between these scans.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="assets/banner.png" alt="Skill Creator Plus" width="100%"> </p>
The skill that builds skills. Draft one and ship it in a single pass, or run evals against a baseline and iterate until it measurably works — targeting Claude Code, the Claude app's chat, or its cloud and local sessions (Claude Cowork, now part of Claude for accounts that have moved over) — runtimes that differ in ways that silently break skills. You can also just ask it how skills work. Based on Anthropic's official skill-creator plugin, with bug fixes and best practices baked in.
Official skill-creator | skill-creator-plus | |
|---|---|---|
| Best practices guide | — | Patterns reference from Anthropic's guidance, plus this project's measured additions (labelled) |
| Script vs. Instruct guidance | — | Decision framework for when to bundle scripts vs. use instructions |
| Structure validation | Allowed keys, name format, length caps | Also type-checks Claude-specific fields, matches the name to the folder, and checks the 1,536-char listing cap, against the agentskills.io spec |
| Cross-runtime linting | — | 14 rules for what breaks outside Claude Code — sub-agent, claude CLI and browser dependencies, third-party imports, file delivery, compaction |
| Cloud and local session guidance | — | Runtime-specific guidance for the Claude app's cloud and local sessions (below) |
| Claude Code runtime docs | — | Listing budget + per-skill degradation order, permission semantics, truncation caps, live-reload behavior — verified against 2.1.222–2.1.251 (listing budget re-verified at 2.1.280) |
| Eval viewer in cloud and local sessions | Silent fail on submit | Copyable JSON textarea (fixed) |
| Description optimizer | Runs claude -p; keeps the top score, no length preference | Runs claude -p, isolated from your installed skills when a credential is exported; length-aware selection + plateau early-stop; refuses to score a run it couldn't measure |
| Benchmarking script | Silent empty results | Fixed directory handling |
| Skill type taxonomy | — | 3 categories from Anthropic's guide + 9 types used inside Anthropic |
| Pre-packaging checklist | — | Official checklist built in |
Anthropic ships a skill-creator plugin. It's good, but several parts are broken or missing:
claude CLI is on PATH in Claude Code and was found in the Claude app's cloud and local sessions, but not in its chat runtime (Chat in the older Chat/Cowork picker; one check each), so gate a claude -p step on command -v claude; the Claude app's chat runtime typically has no sub-agent tool, so parallel eval runs have to collapse to serial there (a Claude app conversation running in a cloud session does have one — route by the tool list, not the product); an agent in a cloud or local session can't serve a local HTTP server and open it, so the eval viewer needs a static build; a third-party import there costs an install on every run, and egress is org-configurable, so a locked-down org can refuse it; and file delivery differs per surface — in a cloud session, writing a file is not delivering it. Structure validation can't see any of that, so there are two checks: quick_validate for structure, and a 14-rule portability linter for runtime assumptions — including the two ways compaction loses a skill. Both are stdlib-only, because they have to run inside the sandboxes they lint. Rule ids, flags and exit codes are in docs/DEVELOPMENT.md.allowed-tools grants permission rather than requesting it; and compaction is a CHARACTER gate, not the documented token one, losing content two different ways — truncation keeps the first 19,900 characters and leaves a marker, while the combined cross-skill cap zeroes a skill outright with no marker and no entry. Verified against Claude Code 2.1.222–2.1.251; the listing budget re-verified at 2.1.280. Where the public docs and the binary disagree, the references (patterns, advanced features) say so and show which one shipped.The eval viewer, description optimizer and benchmarking fixes are in the table above; see the CHANGELOG for the full list.
Install (Claude Code):
claude plugin marketplace add https://github.com/yaniv-golan/skill-creator-plus
claude plugin install skill-creator-plus@skill-creator-plus-marketplaceThen just ask:
/skill-creator-plus:skill-creator-plus Create a skill that reviews pull requests for security issuesThe skill takes it from there — intent capture, drafting, test cases, and delivery.
You can also just ask it a question. Mechanics are in scope on their own — frontmatter fields, path variables, size limits, directory layout, or what breaks across runtimes — however small the question.
Note: If Anthropic'sskill-creatoris also available (installed in Claude Code, or built into your claude.ai account), Claude may pick that one instead. Remove or turn off the other one where your app allows it, or in Claude Code use/skill-creator-plus:skill-creator-plusto invoke it explicitly.
There are two routes, and the fast one is a real route rather than a shortcut.
For when you want the skill itself, not an eval report:
quick_validate for structure, then check_portability for the runtime you're targeting.Steps 2 and 3 are the verification when you skip evals. Shipping without eval evidence is fine; shipping with nothing exercised is not.
For when you need to show the skill helps:
Then repeat. Order is flexible, and an existing draft can join at step 1.
<a id="authoring-for-cowork"></a>
Cloud and local sessions break assumptions that hold everywhere else, and they break them quietly — the write succeeds, the tool reports success, and the file is somewhere nobody will look. The skill knows about:
Parts of this are authoring guidance rather than verified behavior, and the guidance says which is which. For the current, dated state of these runtimes — what was checked, when, and on which Desktop and agent builds — see Writing skills that survive Cowork on ccinternals.dev, which most of this guidance draws on. See docs/DEVELOPMENT.md for the linter's flags, rule ids and exit codes.
— or install manually —
yaniv-golan/skill-creator-plus and click SyncFrom your terminal:
claude plugin marketplace add https://github.com/yaniv-golan/skill-creator-plus
claude plugin install skill-creator-plus@skill-creator-plus-marketplaceOr from within a Claude Code session:
/plugin marketplace add yaniv-golan/skill-creator-plus
/plugin install skill-creator-plus@skill-creator-plus-marketplaceskill-creator-plus.zip/skill-creator-plus:skill-creator-plus Create a skill that reviews pull requests for security issues/skill-creator-plus:skill-creator-plus Run evals on my skill and show me the results/skill-creator-plus:skill-creator-plus Optimize my skill's description for better triggering/skill-creator-plus:skill-creator-plus Do a blind A/B comparison between the old and new version of my skill/skill-creator-plus:skill-creator-plus Check whether my skill will work in Cowork/skill-creator-plus:skill-creator-plus What happens to my skill when the context gets compacted?If you built a skill using Skill Creator Plus, add this badge to your README:
[](https://github.com/yaniv-golan/skill-creator-plus)MIT — see LICENSE. Built on Anthropic's skill-creator (Apache 2.0) — see NOTICE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.