Навыки skill-best-practices

📦

skill-best-practices

Name: skill-best-practices
Author: dboeckli

Ревизия содержимого r1 Средний риск ⚙️ Внешние команды📁 Доступ к файловой системе🌐 Доступ к сети

Build Better AI Skills

AI skills often fail because triggers, structure, and validation are unclear. This guide provides practical patterns for reliable SKILL.md design, testing, and maintenance.

Поддерживает: Claude Codex Code(CC)

📊 72 Адекватно

Maintain this Skill? Claim it 📊 72 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "skill-best-practices" from https://skillstore.io/skills/dboeckli-skill-best-practices.md and its manifest at https://skillstore.io/api/skills/dboeckli-skill-best-practices/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/dboeckli-skill-best-practices.md Подписанный manifest GET /api/skills/dboeckli-skill-best-practices/manifest Подписанный lockfile GET /api/skills/dboeckli-skill-best-practices/lockfile

Протестировать

Использование «skill-best-practices». Create a skill that plans sprints in Linear.

Ожидаемый результат:

A three-use-case plan with sprint triggers, ordered Linear actions, validation gates, error handling, and representative tests.

Использование «skill-best-practices». Review my skill because it rarely loads automatically.

Ожидаемый результат:

Fail: The description does not include phrases users commonly enter.
Warning: The scope is broad and lacks negative triggers.
Fix: Add task-specific phrases, exclusions, and ten paraphrased trigger tests.

Использование «skill-best-practices». Improve a large skill that consumes too much context.

Ожидаемый результат:

A concise core instruction file with detailed guidance moved into clearly linked references.

Аудит безопасности

Средний риск

v1 • 26.09.2026 Открыть версионный отчет

All 91 static alerts are false positives caused by Markdown formatting, bounded local validation, or ordinary path handling. No prompt injection or malicious intent was found. Remote validation still has a medium supply-chain risk because it executes an unpinned npm package.

Просканировано файлов

675

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (1)

Средний

scripts/validate-skills.sh:74

Unpinned Remote Package Execution

Remote validation uses npx with automatic approval and no package version. Registry changes could execute code that was not reviewed with this skill.

Line 74 directly runs the unversioned skills package through npx --yes. The remote mode therefore trusts the current registry release.

Факторы риска

⚙️ Внешние команды (50)

📁 Доступ к файловой системе (4)

scripts/validate-skills.sh:13 scripts/validate-skills.sh:12 scripts/validate-skills.sh:63 scripts/validate-skills.sh:71

🌐 Доступ к сети (1)

SKILL.md:10

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/dboeckli-skill-best-practices/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/dboeckli-skill-best-practices/security.svg)](https://skillstore.io/skills/dboeckli-skill-best-practices?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/dboeckli-skill-best-practices?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dboeckli-skill-best-practices/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/dboeckli-skill-best-practices.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

dboeckli. (2026). skill-best-practices security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dboeckli-skill-best-practices/audits/1

Цитата BibTeX

@techreport{dboeckli-dboeckli-skill-best-practices-2026,
  author = {dboeckli},
  title = {skill-best-practices security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/dboeckli-skill-best-practices/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "skill-best-practices security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "dboeckli"
date-released: "2026-09-26"
url: "https://skillstore.io/skills/dboeckli-skill-best-practices/audits/1"
identifiers:
  - type: other
    value: "skillstore:dboeckli-skill-best-practices:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Create a New Skill

Turn a workflow idea into a structured skill with clear triggers, instructions, examples, and validation steps.

Review an Existing Skill

Evaluate frontmatter, instruction quality, progressive disclosure, testing coverage, and troubleshooting guidance.

Fix Trigger Behavior

Refine descriptions and negative triggers when a skill loads too rarely or on unrelated requests.

Попробуйте эти промпты

Plan a Basic Skill

Create a skill plan for [goal]. Define three use cases, trigger phrases, required tools, workflow steps, and expected results.

Write a Skill Description

Rewrite this skill description: [description]. Include its purpose, specific trigger phrases, important capabilities, and clear exclusions.

Audit a SKILL.md File

Review [SKILL.md content]. Report pass, warning, or fail for frontmatter, triggers, instructions, examples, references, testing, and troubleshooting.

Design an Advanced Workflow

Design a multi-tool skill for [workflow]. Include dependencies, validation gates, rollback steps, tool selection rules, error handling, and test cases.