Skills skill-management

📦

skill-management

Name: skill-management
Author: Doyajin174

v1.0 Content revision r1 Critical ⚙️ External commands📁 Filesystem access

Manage Claude Agent Skills

Teams often need a repeatable way to create and maintain Claude Agent Skills. This skill provides a practical guide for skill structure, metadata, sharing, and troubleshooting.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Do not auto-install this skill.

The canonical policy requires operator review before any installation action.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "skill-management" from https://skillstore.io/skills/doyajin174-skill-management.md and its manifest at https://skillstore.io/api/skills/doyajin174-skill-management/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/doyajin174-skill-management.md Signed manifest GET /api/skills/doyajin174-skill-management/manifest Signed lockfile GET /api/skills/doyajin174-skill-management/lockfile

Test it

Using "skill-management". I need a skill for writing Git commit messages.

Expected outcome:

A focused commit-helper skill with a concise trigger description, read-only tool choices, and a checklist for summary and body formatting.

Using "skill-management". Our team wants to share a code review skill.

Expected outcome:

Create the skill under the project skill directory.
Use a narrow description that mentions code review triggers.
Commit the skill folder so teammates receive it through Git.

Using "skill-management". Claude is not using my skill.

Expected outcome:

A troubleshooting sequence that checks the trigger description, SKILL.md filename casing, YAML syntax, and overlap with other skills.

Security Audit

Critical

v10 • 7/9/2026 Open versioned report

Most static findings are false positives caused by Markdown code fences, inline backticks, and documented Claude skill paths. One destructive removal example is confirmed because it shows recursive deletion under the user home directory, which can remove local skill data if copied or modified incorrectly.

Files scanned

286

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Critical

SKILL.md:148

Recursive delete on root/home

rm -rf ~/.claude/skills/my-skill

Line 148 documents rm -rf against a path under the user home directory. Even though it is an example, copying it can recursively delete local Claude skill files and the skill allows Bash.

Capability review items (2)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

SKILL.md:148

Hidden file in home directory

rm -rf ~/.claude/skills/my-skill

Line 148 accesses the hidden ~/.claude skill directory as part of a recursive delete command. The hidden path itself is expected, but this specific access is destructive.

High

SKILL.md:148

Hidden file access

rm -rf ~/.claude/skills/my-skill

Line 148 accesses the hidden ~/.claude skill directory as part of a recursive delete command. The hidden path itself is expected, but this specific access is destructive.

Risk Factors

⚙️ External commands (44)

📁 Filesystem access (12)

SKILL.md:19 SKILL.md:31 SKILL.md:125 SKILL.md:131 SKILL.md:138 SKILL.md:148 SKILL.md:19 SKILL.md:31 SKILL.md:125 SKILL.md:131 SKILL.md:138 SKILL.md:148

Detected Patterns

Recursive delete on root/home

Audited by: claude View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/doyajin174-skill-management/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/doyajin174-skill-management/security.svg)](https://skillstore.io/skills/doyajin174-skill-management?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/doyajin174-skill-management?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/doyajin174-skill-management/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/doyajin174-skill-management.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

Doyajin174. (2026). skill-management security audit report (audit version 10) [Author version 1.0]. Skillstore. https://skillstore.io/skills/doyajin174-skill-management/audits/10

BibTeX citation

@techreport{doyajin174-doyajin174-skill-management-2026,
  author = {Doyajin174},
  title = {skill-management security audit report (audit version 10)},
  institution = {Skillstore},
  year = {2026},
  number = {10},
  url = {https://skillstore.io/skills/doyajin174-skill-management/audits/10},
  note = {Author version 1.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "skill-management security audit report (audit version 10)"
version: "1.0"
type: report
authors:
  - name: "Doyajin174"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/doyajin174-skill-management/audits/10"
identifiers:
  - type: other
    value: "skillstore:doyajin174-skill-management:audit:10"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Create a personal workflow skill

Use the guide to create a local skill directory, write SKILL.md, and define a clear trigger description.

Share skills with a project team

Follow the project skill layout and Git sharing steps so teammates receive the same workflow guidance.

Debug skill activation issues

Check descriptions, file paths, and YAML syntax when Claude does not select a skill as expected.

Try These Prompts

Create a simple skill

Help me create a focused Claude Agent Skill for [task]. Include a clear name, description, allowed tools, and a short usage example.

Review an existing skill

Review this SKILL.md for clarity, scope, trigger quality, and safe tool choices. Suggest only necessary changes.

Organize project skills

Help me organize project skills under .claude/skills. Recommend names, descriptions, and folder structure for these workflows: [list workflows].

Troubleshoot skill selection

Claude is not selecting my skill for this task: [task]. Inspect the skill description and structure, then explain what to change.

Best Practices

Keep each skill focused on one workflow with a clear trigger description.
Use the smallest allowed-tools set that supports the skill purpose.
Include concrete examples and split long references into separate files.

Avoid

Do not create broad skills that cover unrelated workflows.
Do not give write or shell tools to read-only guidance skills.
Do not copy destructive shell examples without confirming the target path.

Frequently Asked Questions

What does this skill help me do?

It helps you create, update, test, and organize Claude Agent Skills for personal or team workflows.

Does it create skills automatically?

No. It provides guidance and examples that you or Claude can follow when creating skill files.

Which tools does it support?

The marketplace report lists support for Claude, Codex, and Claude Code.

Is it safe for beginners?

Most guidance is safe, but users should be careful with shell examples that create, edit, or delete files.

Can teams use it?

Yes. It explains project skill directories and Git sharing steps for team workflows.

How should I choose allowed tools?

Choose only the tools the skill needs. Prefer read-only tools for review, search, and documentation tasks.

Developer Details

Author

Doyajin174

License

MIT

Author version

v1.0

Skillstore revision

Version notice

The author-declared version is not valid SemVer.

Repository

https://github.com/Doyajin174/myskills/tree/main/.public/skills/skill-management

Ref

1ffa7643651792ccb4bd3b15d924d2c97edff755

Maintenance freshness

7/18/2026

Usage

6 downloads · 305 views

File structure

📄 SKILL.md