스킬 skills-factory
📦

skills-factory

콘텐츠 리비전 r1 치명적 🌐 네트워크 접근📁 파일 시스템 접근🔑 환경 변수⚙️ 외부 명령어

프로덕션에 바로 사용할 수 있는 Claude Code 스킬 구축

신뢰할 수 있는 AI 스킬을 만들려면 명확한 구조, 검증, 배포 지침이 필요합니다. 이 스킬은 반복 가능한 품질 확인을 통해 Claude Code 스킬을 구축하기 위한 템플릿, 워크플로, 스크립트를 제공합니다.

지원: Claude Codex Code(CC)
Maintain this Skill? Claim it ⚠️ 38 나쁨

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청
Review the Skillstore skill "skills-factory" from https://skillstore.io/skills/daronvee-skills-factory.md and its manifest at https://skillstore.io/api/skills/daronvee-skills-factory/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/daronvee-skills-factory.md 서명된 manifest GET /api/skills/daronvee-skills-factory/manifest 서명된 lockfile GET /api/skills/daronvee-skills-factory/lockfile

테스트해 보기

"skills-factory" 사용 중입니다. 엔지니어가 마이그레이션 계획을 작성하는 데 도움이 되는 스킬이 필요합니다.

예상 결과:

집중된 트리거, 필수 메타데이터, 참조 가이드 목록, 검증 체크리스트, 첫 평가 시나리오를 포함한 추천 스킬 개요입니다.

"skills-factory" 사용 중입니다. 내 스킬을 팀과 공유할 준비가 되었는지 확인해 주세요.

예상 결과:

  • 프런트매터 검토 결과
  • 누락된 참조 경고
  • 패키징 준비 상태 메모
  • 실행 전에 검토할 수동 명령

"skills-factory" 사용 중입니다. 이 스킬이 적절한 시점에 트리거되는지 평가할 수 있게 도와주세요.

예상 결과:

정상 성공 경로, 비트리거 사례, 엣지 케이스, 스킬 지침 수정 기준을 포함한 테스트 매트릭스입니다.

보안 감사

치명적
v11 • 2026. 7. 9. 버전별 보고서 열기

Most static findings are documentation examples for Claude skill installation, validation commands, and official Anthropic API usage. Confirmed risks are limited to user-facing local command guidance, an example recursive delete command, and installer filesystem changes that can overwrite or remove an existing skill directory after confirmation.

11
스캔된 파일
5,359
분석된 줄 수
29
검토 항목
0
오탐 무시됨

확인된 보안 우려 사항 (1)

치명적
references/DEPLOYMENT_GUIDE.md:67
Recursive delete on root/home
rm -rf ~/.claude/skills/my-skill
The documentation includes rm -rf against a home-directory skill path. Although scoped to a sample skill folder, recursive deletion in the user home area is dangerous if copied or modified.
기능 검토 항목 (29)

이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.

치명적
references/DEPLOYMENT_GUIDE.md:67
Hidden file in home directory
rm -rf ~/.claude/skills/my-skill
The documentation shows a recursive delete command under the user home skill directory. It is example cleanup, but copying it with the wrong target could cause data loss.
치명적
references/DEPLOYMENT_GUIDE.md:67
Hidden file access
rm -rf ~/.claude/skills/my-skill
The documentation shows a recursive delete command under the user home skill directory. It is example cleanup, but copying it with the wrong target could cause data loss.
중간
references/TROUBLESHOOTING.md:166-177
Ruby/shell backtick execution
Run: `grep -r "TODO: document" src/`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/TROUBLESHOOTING.md:177-182
Ruby/shell backtick execution
Run: `bash scripts/validate_docs.py`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/TROUBLESHOOTING.md:672-673
Ruby/shell backtick execution
Run: `python scripts/validate.py config.yaml`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/TROUBLESHOOTING.md:677-678
Ruby/shell backtick execution
Run: `python ~/.claude/skills/my-skill/scripts/validate.py config.yaml`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/VALIDATION_PATTERNS.md:472-474
Ruby/shell backtick execution
"Run: `npm run lint && npm test`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:60-66
Ruby/shell backtick execution
Run validation: `bash scripts/validate_format.py [document]`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:100-101
Ruby/shell backtick execution
- [ ] All tests passing (`npm test`)
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:101-102
Ruby/shell backtick execution
- [ ] No linting errors (`npm run lint`)
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:102-110
Ruby/shell backtick execution
- [ ] Code coverage ≥80% (`npm run coverage`)
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:110-111
Ruby/shell backtick execution
- [ ] Dependencies updated (`npm audit`)
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:111-116
Ruby/shell backtick execution
- [ ] No secrets in code (check with `git secrets --scan`)
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:116-119
Ruby/shell backtick execution
- [ ] Git tag created (`git tag v1.2.3`)
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:119-120
Ruby/shell backtick execution
**All items complete?** Run: `bash scripts/deploy.sh`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:178-180
Ruby/shell backtick execution
4. Run validation: `bash scripts/validate_openapi.py`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:192-194
Ruby/shell backtick execution
4. Validate schema: `bash scripts/validate_graphql_schema.py`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:206-208
Ruby/shell backtick execution
4. Validate: `protoc --lint_out=. *.proto`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:249-265
Ruby/shell backtick execution
1. Run test coverage: `npm run coverage`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:265-273
Ruby/shell backtick execution
4. Run new tests: `npm test [test-file]`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:273-274
Ruby/shell backtick execution
1. Run full coverage again: `npm run coverage`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:348-356
Ruby/shell backtick execution
Run: `bash scripts/validate_config.py`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:363-366
Ruby/shell backtick execution
Run: `openapi-generator generate -i spec.yaml -g typescript-fetch`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:370-371
Ruby/shell backtick execution
**If errors occur:** Check OpenAPI spec validity with `bash scripts/validate_spec.py`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
references/WORKFLOW_PATTERNS.md:457-460
Ruby/shell backtick execution
Run: `npm run build`
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
scripts/package_skill.py:76
Python shutil operations
shutil.rmtree(target_path)
The installer deletes an existing target skill directory before copying a replacement. The path is constrained to skill install locations and requires confirmation, but it can still remove user files under that target.
중간
scripts/package_skill.py:81
Python shutil operations
shutil.copytree(skill_path, target_path)
The installer copies a user-selected skill directory into Claude skill locations. This is expected behavior, but it modifies filesystem state and should be disclosed.
중간
SKILL.md:170-186
Ruby/shell backtick execution
- Load scripts when needed: "Run validation: `bash scripts/validate.py`"
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.
중간
SKILL.md:262-265
Ruby/shell backtick execution
Team members get skill automatically on `git pull`.
The skill documentation asks users to run local development commands. They are ordinary validation or packaging commands, but marketplace users should review them before execution.

위험 요인

🌐 네트워크 접근 (8)
references/DEPLOYMENT_GUIDE.md:273 references/DEPLOYMENT_GUIDE.md:318 references/DEPLOYMENT_GUIDE.md:325 references/DEPLOYMENT_GUIDE.md:486 references/DEPLOYMENT_GUIDE.md:587 references/TROUBLESHOOTING.md:813 references/TROUBLESHOOTING.md:868 references/TROUBLESHOOTING.md:872
📁 파일 시스템 접근 (50)
references/DEPLOYMENT_GUIDE.md:15 references/DEPLOYMENT_GUIDE.md:28 references/DEPLOYMENT_GUIDE.md:43 references/DEPLOYMENT_GUIDE.md:48 references/DEPLOYMENT_GUIDE.md:54 references/DEPLOYMENT_GUIDE.md:64 references/DEPLOYMENT_GUIDE.md:67 references/DEPLOYMENT_GUIDE.md:158 references/DEPLOYMENT_GUIDE.md:403 references/DEPLOYMENT_GUIDE.md:456 references/DEPLOYMENT_GUIDE.md:544 references/DEPLOYMENT_GUIDE.md:547 references/DEPLOYMENT_GUIDE.md:609 references/DEPLOYMENT_GUIDE.md:695 references/DEPLOYMENT_GUIDE.md:15 references/DEPLOYMENT_GUIDE.md:28 references/DEPLOYMENT_GUIDE.md:43 references/DEPLOYMENT_GUIDE.md:48 references/DEPLOYMENT_GUIDE.md:54 references/DEPLOYMENT_GUIDE.md:64 references/DEPLOYMENT_GUIDE.md:67 references/DEPLOYMENT_GUIDE.md:158 references/DEPLOYMENT_GUIDE.md:403 references/DEPLOYMENT_GUIDE.md:456 references/DEPLOYMENT_GUIDE.md:544 references/DEPLOYMENT_GUIDE.md:547 references/DEPLOYMENT_GUIDE.md:609 references/DEPLOYMENT_GUIDE.md:695 references/TROUBLESHOOTING.md:920 references/TROUBLESHOOTING.md:8 references/TROUBLESHOOTING.md:17 references/TROUBLESHOOTING.md:40 references/TROUBLESHOOTING.md:74 references/TROUBLESHOOTING.md:77 references/TROUBLESHOOTING.md:322 references/TROUBLESHOOTING.md:334 references/TROUBLESHOOTING.md:344 references/TROUBLESHOOTING.md:346 references/TROUBLESHOOTING.md:381 references/TROUBLESHOOTING.md:460 references/TROUBLESHOOTING.md:466 references/TROUBLESHOOTING.md:559 references/TROUBLESHOOTING.md:603 references/TROUBLESHOOTING.md:604 references/TROUBLESHOOTING.md:605 references/TROUBLESHOOTING.md:608 references/TROUBLESHOOTING.md:617 references/TROUBLESHOOTING.md:637 references/TROUBLESHOOTING.md:677 references/TROUBLESHOOTING.md:700
🔑 환경 변수 (11)
references/DEPLOYMENT_GUIDE.md:274 references/DEPLOYMENT_GUIDE.md:293 references/DEPLOYMENT_GUIDE.md:319 references/DEPLOYMENT_GUIDE.md:326 references/DEPLOYMENT_GUIDE.md:487 references/DEPLOYMENT_GUIDE.md:588 references/TROUBLESHOOTING.md:814 references/TROUBLESHOOTING.md:869 references/TROUBLESHOOTING.md:873 references/VALIDATION_PATTERNS.md:81 references/VALIDATION_PATTERNS.md:85
⚙️ 외부 명령어 (50)
references/TROUBLESHOOTING.md:166-177 references/TROUBLESHOOTING.md:177-182 references/TROUBLESHOOTING.md:672-673 references/TROUBLESHOOTING.md:677-678 references/VALIDATION_PATTERNS.md:172 references/VALIDATION_PATTERNS.md:173 references/VALIDATION_PATTERNS.md:321-328 references/VALIDATION_PATTERNS.md:472-474 references/WORKFLOW_PATTERNS.md:60-66 references/WORKFLOW_PATTERNS.md:100-101 references/WORKFLOW_PATTERNS.md:101-102 references/WORKFLOW_PATTERNS.md:102-110 references/WORKFLOW_PATTERNS.md:110-111 references/WORKFLOW_PATTERNS.md:111-116 references/WORKFLOW_PATTERNS.md:116-119 references/WORKFLOW_PATTERNS.md:119-120 references/WORKFLOW_PATTERNS.md:163 references/WORKFLOW_PATTERNS.md:164-165 references/WORKFLOW_PATTERNS.md:165-174 references/WORKFLOW_PATTERNS.md:174-178 references/WORKFLOW_PATTERNS.md:178-180 references/WORKFLOW_PATTERNS.md:180-186 references/WORKFLOW_PATTERNS.md:186-192 references/WORKFLOW_PATTERNS.md:192-194 references/WORKFLOW_PATTERNS.md:194-200 references/WORKFLOW_PATTERNS.md:200-206 references/WORKFLOW_PATTERNS.md:206-208 references/WORKFLOW_PATTERNS.md:208-209 references/WORKFLOW_PATTERNS.md:249-265 references/WORKFLOW_PATTERNS.md:265-273 references/WORKFLOW_PATTERNS.md:273-274 references/WORKFLOW_PATTERNS.md:274-293 references/WORKFLOW_PATTERNS.md:348-356 references/WORKFLOW_PATTERNS.md:363-366 references/WORKFLOW_PATTERNS.md:366-367 references/WORKFLOW_PATTERNS.md:367 references/WORKFLOW_PATTERNS.md:370-371 references/WORKFLOW_PATTERNS.md:379-386 references/WORKFLOW_PATTERNS.md:457-460 scripts/comprehensive_validate.py:302-384 scripts/comprehensive_validate.py:384 scripts/init_skill.py:73 scripts/init_skill.py:74 scripts/init_skill.py:84 SKILL.md:18 SKILL.md:74-77 SKILL.md:77-80 SKILL.md:80-86 SKILL.md:86-89 SKILL.md:89-94

감지된 패턴

Recursive delete on root/home
감사자: claude 감사 이력 보기 →
이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기
보안 평가

보고서 링크 복사

https://skillstore.io/skills/daronvee-skills-factory/audits/11?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/daronvee-skills-factory/security.svg)](https://skillstore.io/skills/daronvee-skills-factory?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/daronvee-skills-factory?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/daronvee-skills-factory/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/daronvee-skills-factory.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
학술 인용 (APA · BibTeX · CFF)

APA 인용

DaronVee. (2026). skills-factory security audit report (audit version 11) [Author version unspecified]. Skillstore. https://skillstore.io/skills/daronvee-skills-factory/audits/11

BibTeX 인용

@techreport{daronvee-daronvee-skills-factory-2026, author = {DaronVee}, title = {skills-factory security audit report (audit version 11)}, institution = {Skillstore}, year = {2026}, number = {11}, url = {https://skillstore.io/skills/daronvee-skills-factory/audits/11}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "skills-factory security audit report (audit version 11)" version: "unspecified" type: report authors: - name: "DaronVee" date-released: "2026-07-09" url: "https://skillstore.io/skills/daronvee-skills-factory/audits/11" identifiers: - type: other value: "skillstore:daronvee-skills-factory:audit:11" description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간
68
아키텍처
85
유지보수성
87
콘텐츠
70
커뮤니티
91
사양 준수

만들 수 있는 것

새 팀 스킬 만들기

팀과 공유하기 전에 명확한 지침, 참조, 검증 단계를 갖춘 구조화된 스킬을 생성합니다.

기존 스킬 검증

배포 전에 스킬의 프런트매터, 참조, 이름 지정, 패키징 문제를 확인합니다.

배포용 스킬 패키징

반복 가능한 패키징 지침을 사용해 Claude Code, Claude Desktop 또는 API 기반 배포를 위한 스킬 폴더를 준비합니다.

이 프롬프트를 사용해 보세요

기본 스킬 시작 
[task]를 위한 간단한 Claude Code 스킬을 만들 수 있게 도와주세요. 구조 초안을 작성하기 전에 목표, 대상 사용자, 도구를 물어봐 주세요.
스킬 구조 개선 
명확성, 점진적 공개, 필수 메타데이터, 누락된 참조 파일 측면에서 내 SKILL.md를 검토해 주세요. 구체적인 수정 사항을 제안해 주세요.
검증 및 패키징 
이 스킬을 검증하고 패키징하는 과정을 안내해 주세요. 내가 실행하기 전에 각 명령을 설명하고 파일시스템 변경 사항을 표시해 주세요.
평가 워크플로 설계 
현실적인 성공 사례, 엣지 케이스, 실패 사례, 두 번째 에이전트 검토 루프를 사용해 이 스킬의 평가 계획을 만들어 주세요.

모범 사례

  • 생성된 모든 명령을 실행하기 전에 검토하세요. 특히 파일을 복사, 삭제 또는 설치하는 명령은 더 주의해야 합니다.
  • SKILL.md는 간결하게 유지하고 자세한 워크플로는 참조 파일에 배치하세요.
  • 스킬을 공유하기 전에 성공, 엣지, 실패 시나리오로 테스트하세요.

피하기

  • 관련 없는 개발 작업에도 트리거되는 광범위한 스킬을 만들지 마세요.
  • 시크릿, 비공개 구성 또는 로컬 머신 경로를 공유 스킬에 패키징하지 마세요.
  • 패키징만으로 스킬이 안전하거나 유용하다는 증거라고 의존하지 마세요.

자주 묻는 질문

이 스킬은 무엇을 만드는 데 도움이 되나요?
구조화된 지침, 참조, 검증 확인, 패키징 지침을 갖춘 Claude Code 스킬을 만드는 데 도움이 됩니다.
명령을 자동으로 실행하나요?
아니요. 문서와 스크립트를 제공하지만, 로컬 명령을 언제 실행할지는 사용자가 선택해야 합니다.
Claude Code에 스킬을 설치할 수 있나요?
예. 패키징 스크립트는 사용자의 작업 후 검증된 스킬을 개인 또는 프로젝트 스킬 디렉터리에 설치할 수 있습니다.
Claude Code 전용인가요?
워크플로는 Claude Code에 중점을 두지만, 패키징 참조에서는 Claude Desktop, Claude.ai, API 배포도 언급합니다.
사용하기 전에 무엇을 검토해야 하나요?
스크립트를 실행하거나 zip을 공유하기 전에 셸 명령, 파일시스템 설치 경로, 패키징된 파일을 검토하세요.
보안 검토를 대체하나요?
아니요. 구조와 검증을 개선하지만, 마켓플레이스 게시 전에는 별도의 보안 검토가 여전히 필요합니다.

개발자 세부 정보

작성자

DaronVee

라이선스

MIT

Skillstore 리비전

r1

버전 안내

작성자가 버전을 선언하지 않았습니다.

리포지토리

https://github.com/DaronVee/ccgg-skills-factory/tree/master/skills-factory

참조

1ffa7643651792ccb4bd3b15d924d2c97edff755

유지보수 최신성

2026. 7. 18.

사용량

7 다운로드 · 201 조회

파일 구조

📁 references/

📄 DEPLOYMENT_GUIDE.md

📄 EVALUATION_GUIDE.md

📄 TROUBLESHOOTING.md

📄 TWO_CLAUDE_METHODOLOGY.md

📄 VALIDATION_PATTERNS.md

📄 WORKFLOW_PATTERNS.md

📁 scripts/

📄 comprehensive_validate.py

📄 init_skill.py

📄 package_skill.py

📄 quick_validate.py

📄 SKILL.md

DaronVee의 다른 스킬

전체 보기

관련 스킬

전체 보기