Skills create-skill

📦

create-skill

Name: create-skill
Author: Cygnusfear

Content revision r1 Medium Risk ⚙️ External commands📁 Filesystem access

Create Reusable AI Skills

AI skills need clear structure, reusable resources, and safe activation rules. This skill guides authors through planning, writing, testing, and packaging focused skills for Claude, Codex, and Claude Code.

Supports: Claude Codex Code(CC)

📊 71 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "create-skill" from https://skillstore.io/skills/cygnusfear-create-skill.md and its manifest at https://skillstore.io/api/skills/cygnusfear-create-skill/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/cygnusfear-create-skill.md Signed manifest GET /api/skills/cygnusfear-create-skill/manifest Signed lockfile GET /api/skills/cygnusfear-create-skill/lockfile

Test it

Using "create-skill". I need a skill that helps analysts summarize customer interviews.

Expected outcome:

A focused skill plan with activation wording, SKILL.md sections, likely reference files, and test prompts for interview summaries.

Using "create-skill". My skill is too long and repeats reference content.

Expected outcome:

A revision plan that moves detailed material into references, keeps core workflow steps in SKILL.md, and lists validation checks.

Using "create-skill". Prepare a skill package for sharing with my team.

Expected outcome:

A packaging checklist covering frontmatter, paths, included resources, examples, and a final test cycle.

Security Audit

Medium Risk

v8 • 7/5/2026 Open versioned report

The static command and filesystem findings are false positives caused by Markdown examples, inline code, and tool names in a documentation-only skill. No evidence found of prompt injection, data exfiltration, obfuscated code, or bundled executable malware. The main residual concern is guidance that recommends allowing all tools by default.

Files scanned

374

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:43 SKILL.md:118-120

Overbroad Tool Permission Guidance

The skill recommends leaving allowed-tools empty to allow all tools unless restriction is needed. This can cause generated skills to request unnecessary execution, file, and network capabilities.

The guidance is explicit and repeated in the skill. It is not malicious, but it weakens least-privilege defaults for generated skills.

Risk Factors

⚙️ External commands (49)

📁 Filesystem access (2)

SKILL.md:195 SKILL.md:195

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/cygnusfear-create-skill/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/cygnusfear-create-skill/security.svg)](https://skillstore.io/skills/cygnusfear-create-skill?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/cygnusfear-create-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/cygnusfear-create-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/cygnusfear-create-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

Cygnusfear. (2026). create-skill security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/cygnusfear-create-skill/audits/8

BibTeX citation

@techreport{cygnusfear-cygnusfear-create-skill-2026,
  author = {Cygnusfear},
  title = {create-skill security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/cygnusfear-create-skill/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "create-skill security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "Cygnusfear"
date-released: "2026-07-05"
url: "https://skillstore.io/skills/cygnusfear-create-skill/audits/8"
identifiers:
  - type: other
    value: "skillstore:cygnusfear-create-skill:audit:8"
    description: "Skillstore immutable audit report identifier"

Compare variants

3 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

AaronAbuUsama Recommended

aaronabuusama-create-skill

Skillstore Score 76

Evidence Confidence High

Skillstore usage 12

Updated

2026-08-21

0xmsc

0xmsc-create-skill

Skillstore Score 75

Evidence Confidence High

Skillstore usage 29

Updated

2026-08-21

Cygnusfear Current

cygnusfear-create-skill

Skillstore Score 71

Evidence Confidence High

Skillstore usage 8

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Design Internal Agent Skills

Create focused skills that capture team workflows, reference material, and repeatable procedures.

Standardize Skill Documentation

Turn scattered process notes into structured SKILL.md files with clear resources and test cases.

Prepare Shared Skill Packages

Review skill structure, frontmatter, examples, and packaging before sharing with a team or marketplace.

Try These Prompts

Create a First Skill

Use create-skill to help me design a skill for [task]. Ask for the key examples first, then draft the SKILL.md outline.

Improve an Existing Skill

Review my current skill and suggest improvements to metadata, resource structure, and test cases. Keep the changes focused.

Plan Bundled Resources

Given these workflows, decide which scripts, references, and assets belong in the skill. Explain the purpose of each resource.

Prepare for Distribution

Audit this skill for packaging readiness, least-privilege tools, duplicate content, and test coverage before marketplace submission.

Best Practices

Start with concrete user examples before writing reusable instructions.
Keep SKILL.md concise and move detailed schemas or policies into references.
Use the smallest practical allowed-tools list for each skill.

Avoid

Creating one broad skill that covers unrelated workflows.
Storing large reference material directly in SKILL.md.
Leaving all tools available when the workflow only needs read-only access.

Frequently Asked Questions

Does this skill create files automatically?

It provides guidance and examples. File creation depends on the assistant tools available in the current environment.

Can it help update an existing skill?

Yes. It includes an update flow for improving metadata, resources, tests, and packaging.

Which files are required for a skill?

A SKILL.md file is required. Scripts, references, and assets are optional resources.

Does it support Claude Code and Codex?

The marketplace report lists support for Claude, Codex, and Claude Code compatibility.

How should allowed-tools be handled?

Use least privilege. Allow only tools needed for the workflow, especially before publishing shared skills.

Can it validate marketplace security?

It can guide structure and review questions, but it does not replace a security audit or schema validator.

Developer Details

Author

Cygnusfear

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/Cygnusfear/claude-stuff/tree/main/skills/create-skill

Ref

7e9e368dc1a370f2040369ebcd0db06d90cb48e5

Maintenance freshness

7/18/2026

Usage

4 downloads · 303 views

File structure

📄 skill-template.md

📄 SKILL.md