Skills building-commands

📦

building-commands

Name: building-commands
Author: C0ntr0lledCha0s

v2.0.0 Content revision r1 Safe 📁 Filesystem access⚙️ External commands🌐 Network access

Build Claude Code Slash Commands

Teams need repeatable AI workflows that are easy to invoke and review. This skill helps create, update, validate, and document Claude Code slash commands.

Supports: Claude Codex Code(CC)

🥇 84 Gold

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "building-commands" from https://skillstore.io/skills/c0ntr0lledcha0s-building-commands.md and its manifest at https://skillstore.io/api/skills/c0ntr0lledcha0s-building-commands/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/c0ntr0lledcha0s-building-commands.md Signed manifest GET /api/skills/c0ntr0lledcha0s-building-commands/manifest Signed lockfile GET /api/skills/c0ntr0lledcha0s-building-commands/lockfile

Test it

Using "building-commands". Create a command to run unit tests for a selected package.

Expected outcome:

A proposed command name and file location.
Recommended argument structure for the package path.
Minimal tool permissions for reading files and running tests.
Workflow steps, examples, and validation checks.

Using "building-commands". Review an existing command that uses Bash and file arguments.

Expected outcome:

A checklist of frontmatter, naming, and argument documentation issues.
Security notes for path validation and shell argument handling.
Suggested edits that reduce tool permissions where possible.

Using "building-commands". Fix commands that use short model aliases.

Expected outcome:

A migration summary with affected commands, recommended model values, and validation follow-up.

Security Audit

Safe

v8 • 7/5/2026 Open versioned report

No evidence of malicious intent, prompt injection, data exfiltration, or stealthy execution was found. The static findings are false positives from Markdown examples, defensive path traversal guidance, documentation links, and validation terminology.

Files scanned

2,639

Lines analyzed

Review items

False positives ignored

Risk Factors

📁 Filesystem access (10)

references/command-checklist.md:213 references/command-checklist.md:455 references/command-checklist.md:456 references/command-checklist.md:457 references/command-migration-guide.md:482 references/command-migration-guide.md:483 references/command-update-patterns.md:170 references/command-update-patterns.md:670 SKILL.md:32 SKILL.md:32

⚙️ External commands (119)

🌐 Network access (1)

SKILL.md:131

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/c0ntr0lledcha0s-building-commands/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/c0ntr0lledcha0s-building-commands/security.svg)](https://skillstore.io/skills/c0ntr0lledcha0s-building-commands?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/c0ntr0lledcha0s-building-commands?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/c0ntr0lledcha0s-building-commands/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/c0ntr0lledcha0s-building-commands.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

C0ntr0lledCha0s. (2026). building-commands security audit report (audit version 8) [Author version 2.0.0]. Skillstore. https://skillstore.io/skills/c0ntr0lledcha0s-building-commands/audits/8

BibTeX citation

@techreport{c0ntr0lledcha0s-c0ntr0lledcha0s-building-commands-2026,
  author = {C0ntr0lledCha0s},
  title = {building-commands security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/c0ntr0lledcha0s-building-commands/audits/8},
  note = {Author version 2.0.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "building-commands security audit report (audit version 8)"
version: "2.0.0"
type: report
authors:
  - name: "C0ntr0lledCha0s"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/c0ntr0lledcha0s-building-commands/audits/8"
identifiers:
  - type: other
    value: "skillstore:c0ntr0lledcha0s-building-commands:audit:8"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Create Team Commands

Build reusable slash commands for testing, reviewing, scaffolding, and documentation workflows.

Standardize Existing Commands

Review command files for schema quality, naming rules, model format, examples, and tool permissions.

Design Safer Automation

Plan command workflows with argument validation, least-privilege tools, and clear safeguards.

Try These Prompts

Create a First Command

Create a Claude Code slash command for [task]. Ask for the command name, arguments, tools, and expected output before writing it.

Validate a Command

Review my slash command at [path]. Check frontmatter, argument documentation, tool permissions, model format, examples, and security notes.

Migrate Model Fields

Update commands in [directory] so model fields use version aliases or full model IDs. Report each change and validation result.

Design a Secure Command Suite

Design a namespaced set of slash commands for [workflow]. Include names, arguments, least-privilege tools, validation rules, and testing steps.

Best Practices

Use the smallest tool set that supports the command workflow.
Document every argument with expected format, defaults, and examples.
Validate paths and shell arguments before allowing Bash-based commands.

Avoid

Do not create commands with broad tools when read-only access is enough.
Do not pass user arguments directly into shell commands without validation.
Do not use short model aliases in command frontmatter.

Frequently Asked Questions

What does this skill help create?

It helps create and update Claude Code slash commands stored as Markdown files with YAML frontmatter.

Can it validate an existing command?

Yes. It includes guidance and a validator script for common schema, naming, model, and documentation checks.

Does it run the commands it creates?

No. It provides command files and validation guidance. Execution depends on user approval and tool settings.

Why does it discuss model aliases?

Claude Code commands need version aliases or full model IDs. Short aliases can cause command execution errors.

Is Bash required for every command?

No. The skill recommends Bash only when needed and encourages least-privilege tool permissions.

Can Codex users learn from it?

Yes. Codex users can use the patterns to design AI command workflows, but the file format targets Claude Code.

Developer Details

Author

C0ntr0lledCha0s

License

MIT

Author version

v2.0.0

Skillstore revision

Repository

https://github.com/C0ntr0lledCha0s/claude-code-plugin-automations/tree/main/agent-builder/skills/building-commands

Ref

5ab1d37e83436c6eef84de88573e142b94f2a4ad

Maintenance freshness

7/18/2026

Usage

21 downloads · 200 views

File structure

📁 references/

📄 command-checklist.md

📄 command-migration-guide.md

📄 command-update-patterns.md

📁 scripts/

📄 validate-command.py

📁 templates/

📄 command-template.md

📄 SKILL.md