Skills creating-skills
📦

creating-skills

Content revision r1 Medium Risk ⚙️ External commands📁 Filesystem access

Create Claude Code Skills

Building a useful AI skill requires clear triggers, structure, and guardrails. This guide helps authors draft concise Claude Code skills with examples and quality checks.

Supports: Claude Codex Code(CC)
📊 71 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "creating-skills" from https://skillstore.io/skills/bae-changhyun-creating-skills.md and its manifest at https://skillstore.io/api/skills/bae-changhyun-creating-skills/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/bae-changhyun-creating-skills.md Signed manifest GET /api/skills/bae-changhyun-creating-skills/manifest Signed lockfile GET /api/skills/bae-changhyun-creating-skills/lockfile

Test it

Using "creating-skills". I need a skill for creating release notes from merged pull requests.

Expected outcome:

A concise skill outline with a release-notes name, trigger-focused description, quick start, workflow steps, helper script guidance, and review checklist.

Using "creating-skills". This skill file is too long and includes many examples.

Expected outcome:

A restructure plan that keeps the main workflow short and moves extended examples, troubleshooting, and background material into references.

Using "creating-skills". Check whether my skill follows Claude Code conventions.

Expected outcome:

A review summary covering frontmatter, naming, trigger phrases, line count, helper script value, and permission guidance.

Security Audit

Medium Risk
v8 • 7/6/2026 Open versioned report

The static command and filesystem findings are false positives caused by Markdown examples, inline code spans, and standard Claude skills directory documentation. One semantic concern remains: the guide encourages broad Bash wildcard permissions, which can lead authors to grant generated skills more command access than necessary.

1
Files scanned
281
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
SKILL.md:231-250
Overbroad Bash Permission Guidance
The guide recommends wildcard Bash permissions such as Bash(git *), Bash(npm *), and Bash(mkdir *) for cleaner permissions. Generated skills could receive broader command access than needed.
The text directly recommends broad wildcard permission patterns and labels them cleaner. This is legitimate documentation, but it can weaken least-privilege controls in generated skills.

Risk Factors

⚙️ External commands (38)
SKILL.md:12-39 SKILL.md:39-45 SKILL.md:45-50 SKILL.md:50-54 SKILL.md:54-61 SKILL.md:61-65 SKILL.md:65-66 SKILL.md:66 SKILL.md:70-72 SKILL.md:72-75 SKILL.md:75-79 SKILL.md:79-88 SKILL.md:88-101 SKILL.md:101-102 SKILL.md:102-103 SKILL.md:103-120 SKILL.md:120-121 SKILL.md:121-134 SKILL.md:134-140 SKILL.md:140-155 SKILL.md:155-164 SKILL.md:164-172 SKILL.md:172-188 SKILL.md:188-192 SKILL.md:192-200 SKILL.md:200-205 SKILL.md:205-210 SKILL.md:210-216 SKILL.md:216-230 SKILL.md:230-231 SKILL.md:231-235 SKILL.md:235-237 SKILL.md:237-251 SKILL.md:251-256 SKILL.md:256 SKILL.md:257 SKILL.md:258 SKILL.md:259
📁 Filesystem access (6)
SKILL.md:14 SKILL.md:17 SKILL.md:165 SKILL.md:14 SKILL.md:17 SKILL.md:165
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/bae-changhyun-creating-skills/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/bae-changhyun-creating-skills/security.svg)](https://skillstore.io/skills/bae-changhyun-creating-skills?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/bae-changhyun-creating-skills?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/bae-changhyun-creating-skills/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/bae-changhyun-creating-skills.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

Bae-ChangHyun. (2026). creating-skills security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/bae-changhyun-creating-skills/audits/8

BibTeX citation

@techreport{bae-changhyun-bae-changhyun-creating-skills-2026, author = {Bae-ChangHyun}, title = {creating-skills security audit report (audit version 8)}, institution = {Skillstore}, year = {2026}, number = {8}, url = {https://skillstore.io/skills/bae-changhyun-creating-skills/audits/8}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "creating-skills security audit report (audit version 8)" version: "unspecified" type: report authors: - name: "Bae-ChangHyun" date-released: "2026-07-06" url: "https://skillstore.io/skills/bae-changhyun-creating-skills/audits/8" identifiers: - type: other value: "skillstore:bae-changhyun-creating-skills:audit:8" description: "Skillstore immutable audit report identifier"

Compare variants

6 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score
BrendanShields Recommended

brendanshields-creating-skills

Skillstore Score 79
Evidence Confidence High
Skillstore usage 18
Updated

2026-08-21

BPSAI

bpsai-creating-skills

Skillstore Score 78
Evidence Confidence High
Skillstore usage 10
Updated

2026-08-21

AgentWorkforce

agentworkforce-creating-skills

Skillstore Score 77
Evidence Confidence High
Skillstore usage 9
Updated

2026-08-21

Bae-ChangHyun Current

bae-changhyun-creating-skills

Skillstore Score 71
Evidence Confidence High
Skillstore usage 13
Updated

2026-08-21

Asmayaseen

asmayaseen-creating-skills

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 12
Updated

2026-08-21

Awais68

awais68-creating-skills

Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 10
Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
87
Content
72
Community
91
Spec Compliance

What You Can Build

Draft a First Skill

Create a clean SKILL.md outline with required metadata, a short workflow, and focused rules.

Review Skill Structure

Check an existing skill for naming, trigger phrases, token budget, and section order.

Plan Supporting References

Decide which examples, guides, or helper scripts belong outside the main skill file.

Try These Prompts

Start a Basic Skill 
Use the creating-skills guide to draft a SKILL.md for a skill that helps with [task]. Include frontmatter, a quick start, and core rules.
Improve an Existing Draft 
Review my SKILL.md using the creating-skills checklist. Identify unclear triggers, extra detail, missing sections, and permission risks.
Split Detailed References 
Help me reorganize this long skill. Keep SKILL.md under 500 lines and move detailed examples into reference files.
Design a Skill Suite 
Plan a set of related Claude Code skills for [domain]. Recommend names, descriptions, shared references, helper scripts, and review criteria.

Best Practices

  • Write descriptions with what the skill does, when to use it, and key capabilities.
  • Keep SKILL.md focused, and move long examples into reference files.
  • Require confirmation before file changes, destructive commands, or external resource creation.

Avoid

  • Creating wrapper scripts for simple commands that the agent can run directly.
  • Adding broad background explanations that do not change the agent workflow.
  • Using broad command permissions where task-specific permissions would work.

Frequently Asked Questions

What does this skill help me create?
It helps you write Claude Code skills with clear metadata, structure, examples, and quality checks.
Can it create files for me?
It includes setup examples, but file creation should still be approved by the user before writing to disk.
Does it work with Codex?
The guidance is useful for Codex-assisted authoring, but the skill format targets Claude Code skills.
Does it include security guidance?
It recommends confirmation for critical actions, but permission examples should be narrowed for production skills.
When should I add helper scripts?
Add scripts only for reusable, complex, or structured processing that provides clear value.
How long should SKILL.md be?
The guide recommends keeping the main file under 500 lines and moving details into references.

Developer Details

License

MIT

Skillstore revision

r1

Version notice

The author did not declare a version.

Repository

https://github.com/Bae-ChangHyun/cc-plugins-bch/tree/main/plugins/utils/skills/creating-skills

Ref

c4231f0153ccd2a2ed62274c5a372bf8f2386d3f

Maintenance freshness

7/18/2026

Usage

7 downloads · 312 views

File structure

📄 SKILL.md