Skills example-skill

📦

example-skill

Name: example-skill
Author: C0ntr0lledCha0s

v1.0.0 Content revision r1 Medium Risk ⚙️ External commands

Use a Placeholder Skill Template

Teams need a simple skill template before writing domain instructions. This skill shows a reusable structure for triggers, resources, examples, and validation guidance.

Supports: Claude Codex Code(CC)

📊 73 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "example-skill" from https://skillstore.io/skills/c0ntr0lledcha0s-example-skill.md and its manifest at https://skillstore.io/api/skills/c0ntr0lledcha0s-example-skill/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/c0ntr0lledcha0s-example-skill.md Signed manifest GET /api/skills/c0ntr0lledcha0s-example-skill/manifest Signed lockfile GET /api/skills/c0ntr0lledcha0s-example-skill/lockfile

Test it

Using "example-skill". I want to adapt this template for configuration file reviews.

Expected outcome:

A revised skill outline with specific triggers for configuration files, validation steps, and user confirmation before script execution.

Using "example-skill". Check whether this example skill is ready to publish.

Expected outcome:

A review noting placeholder content, missing referenced resources, broad Bash access, and required edits before publication.

Using "example-skill". Help me define resources for the skill.

Expected outcome:

A concise plan for reference documents, optional scripts, template files, and the conditions for using each resource.

Security Audit

Medium Risk

v8 • 7/5/2026 Open versioned report

Most static detections are Markdown inline-code false positives, not Ruby or shell backtick execution. Two lines still direct the agent to run helper shell scripts, and the skill grants broad Bash access in a community template.

Files scanned

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:5

Broad Bash Permission in Template Skill

The skill grants Bash in allowed-tools while using generic placeholder triggers. This increases execution risk when the skill activates for broad or unfinished workflows.

The Bash permission is explicit in the frontmatter, and the rest of the skill is a placeholder template. There is no evidence of malicious intent, so confidence is high for risk but not for abuse.

Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:31

Ruby/shell backtick execution

2. **Run Scripts**: Execute helper scripts from `{baseDir}/scripts/` when needed

The line instructs the agent to execute helper scripts from the skill directory. Running community-provided scripts through Bash is an external command risk even though the syntax is Markdown.

Medium

SKILL.md:57

Ruby/shell backtick execution

2. Validate against schema using `{baseDir}/scripts/validator.sh`

The line directs validation using a validator.sh helper script. Executing a shell script from a community skill can run arbitrary local commands if the script is present or later added.

Risk Factors

⚙️ External commands (9)

SKILL.md:30 SKILL.md:31 SKILL.md:32 SKILL.md:33 SKILL.md:55 SKILL.md:57 SKILL.md:58 SKILL.md:63 SKILL.md:64

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/c0ntr0lledcha0s-example-skill/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/c0ntr0lledcha0s-example-skill/security.svg)](https://skillstore.io/skills/c0ntr0lledcha0s-example-skill?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/c0ntr0lledcha0s-example-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/c0ntr0lledcha0s-example-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/c0ntr0lledcha0s-example-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

C0ntr0lledCha0s. (2026). example-skill security audit report (audit version 8) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/c0ntr0lledcha0s-example-skill/audits/8

BibTeX citation

@techreport{c0ntr0lledcha0s-c0ntr0lledcha0s-example-skill-2026,
  author = {C0ntr0lledCha0s},
  title = {example-skill security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/c0ntr0lledcha0s-example-skill/audits/8},
  note = {Author version 1.0.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "example-skill security audit report (audit version 8)"
version: "1.0.0"
type: report
authors:
  - name: "C0ntr0lledCha0s"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/c0ntr0lledcha0s-example-skill/audits/8"
identifiers:
  - type: other
    value: "skillstore:c0ntr0lledcha0s-example-skill:audit:8"
    description: "Skillstore immutable audit report identifier"

Compare variants

5 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

anthropics Recommended

anthropics-example-skill

Skillstore Score 80

Evidence Confidence High

Skillstore usage 10

Updated

2026-08-21

ANcpLua

ancplua-example-skill

Skillstore Score 78

Evidence Confidence High

Skillstore usage 11

Updated

2026-08-21

ChaiWithJai

chaiwithjai-example-skill

Skillstore Score 78

Evidence Confidence High

Skillstore usage 7

Updated

2026-08-21

Joseph OBrien

89jobrien-example-skill

Skillstore Score 77

Evidence Confidence High

Skillstore usage 11

Updated

2026-08-21

C0ntr0lledCha0s Current

c0ntr0lledcha0s-example-skill

Skillstore Score 73

Evidence Confidence High

Skillstore usage 10

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Draft a New Skill

Use the structure as a starting point for a custom skill with clear triggers, resources, and examples.

Review Skill Anatomy

Inspect a compact example of frontmatter, capabilities, activation rules, resources, and operational notes.

Plan Automation Workflows

Map planned validation scripts and reference documents before implementing a specialized automation skill.

Try These Prompts

Identify the Template Sections

Explain the main sections of this skill template and what each section should contain.

Customize the Placeholders

Replace the placeholder task, trigger, and domain terms with details for my configuration review workflow.

Tighten Activation Rules

Review the activation rules and suggest narrower triggers that avoid unexpected invocation.

Harden Script Usage

Audit the script execution guidance and propose safer command, confirmation, and validation requirements.

Best Practices

Replace every placeholder with specific domain language before publication.
Keep activation triggers narrow and tied to observable user intent or file types.
Require confirmation before running scripts from a community skill.

Avoid

Publishing the template without replacing task X, Y, Z, and W.
Granting Bash access when the workflow only needs reading and writing files.
Referencing scripts or documents that are not included with the skill.

Frequently Asked Questions

Is this skill ready for direct marketplace use?

No. It is a template and needs specific task details, triggers, resources, and safety rules.

What tools does the skill request?

It requests Read, Grep, Glob, and Bash in the frontmatter.

Does the package include the referenced scripts?

No. The reported file structure only includes SKILL.md.

Why is Bash access a concern?

Bash can run local commands, so script execution should be narrow, explicit, and confirmed by the user.

Can it help create a custom skill?

Yes. It provides a useful outline for capabilities, triggers, resources, examples, and important notes.

What should authors change first?

Authors should replace the placeholders and remove any tool permissions that the final workflow does not require.

Developer Details

Author

C0ntr0lledCha0s

License

MIT

Author version

v1.0.0

Skillstore revision

Repository

https://github.com/C0ntr0lledCha0s/claude-code-plugin-automations/tree/main/agent-builder/skills/building-plugins/templates/full-plugin-template/skills/example-skill

Ref

5ab1d37e83436c6eef84de88573e142b94f2a4ad

Maintenance freshness

7/18/2026

Usage

8 downloads · 246 views

File structure

📄 SKILL.md