create-skill — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited create-skill (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when the user wants to create, edit, or understand agent skills in Zed.
A skill is a reusable set of instructions that an agent can load on demand. Each skill lives in its own directory and is defined by a SKILL.md file with YAML frontmatter.
Skills can be placed in two locations:
| Scope | Path | When to use |
|---|---|---|
| Global | ~/.agents/skills/<skill-name>/SKILL.md | Personal skills, available in all projects |
| Project-local | <project>/.agents/skills/<skill-name>/SKILL.md | Project-specific skills, shared with collaborators through version control |
Prefer project-local when the skill is specific to a repository. Prefer global when the skill is a personal workflow the user wants everywhere.
Every SKILL.md must start with YAML frontmatter between --- delimiters:
---
name: my-skill-name
description: A clear, specific description of what this skill does and when to use it.
---
# Skill Title
Instructions for the agent go here. Write them as if you're telling the agent
what to do when this skill is activated.^[a-z0-9]+(-[a-z0-9]+)*$true, the skill is hidden from the agent's automatic catalog. The user can still invoke it manually via the / slash command menu. Useful for skills that should only run when explicitly requested.The skill name must:
---SKILL.mdGood: git-release, pr-review, rust-patterns Bad: Git-Release, pr--review, -my-skill, my_skill
The body of the SKILL.md (after the frontmatter) contains the instructions the agent will follow. Guidelines:
templates/component.tsx). The agent can read these files when the skill is activated.description field is the agent's primary signal for whether to load this skill. "Helps with code" is too vague. "Generate React components following the project's design system patterns" is specific.A skill directory can contain additional files beyond SKILL.md:
~/.agents/skills/react-component/
├── SKILL.md
├── templates/
│ ├── component.tsx
│ └── test.tsx
└── examples/
└── button.tsxReference these in the skill body. The agent can read them using the file path shown in the <directory> tag of the skill envelope.
create_directory tool normally only creates directories inside the current project, but it has a special allow case for global skills under ~/.agents/skills.SKILL.md with frontmatter and instructions. The write_file and edit_file tools also have a special allow case for creating or modifying files under ~/.agents/skills.After creating the skill, it will be automatically discovered by Zed's agent on the next conversation (no restart needed for global skills if the ~/.agents/skills/ directory already exists).
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.