📦
planning-with-files
83Organize Long AI Tasks with Planning Files
Long AI sessions can lose goals, decisions, and progress. This skill guides Claude, Codex, and Claude Code to store plans, findings, and logs in project files.
Productivity View
Skills skill-creator
📦
skill-creator
Content revision r1 Medium Risk ⚙️ External commands📁 Filesystem access
Create Effective AI Skills
Building reusable AI skills can be inconsistent and slow. This skill guides structure, resources, validation, and packaging for Claude, Codex, and Claude Code.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "skill-creator" from https://skillstore.io/skills/zhanlincui-skill-creator.md and its manifest at https://skillstore.io/api/skills/zhanlincui-skill-creator/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "skill-creator". Create a finance reporting skill with reusable references.
Expected outcome:
- A concise skill structure with a clear trigger description.
- A references plan for reporting schemas and metric definitions.
- A validation checklist before packaging.
Using "skill-creator". Improve an existing PDF workflow skill.
Expected outcome:
- A shorter main instruction file with clearer workflow steps.
- Recommendations for moving detailed guidance into references.
- Notes about scripts that need representative testing.
Using "skill-creator". Package a completed team skill for review.
Expected outcome:
- Validation results for required frontmatter and naming rules.
- A distributable skill archive when validation passes.
- Warnings to remove private or temporary files before sharing.
Security Audit
Medium Riskv4 • 7/8/2026 Open versioned report
The static command, sensitive-file, and reconnaissance alerts are mostly false positives from markdown backticks, template text, validation errors, and zip packaging. No prompt injection or data exfiltration intent was found. Two local filesystem risks remain in the helper scripts: unvalidated output names and unfiltered packaging.
6
Files scanned
978
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (2)
Medium
Unvalidated Skill Name Can Escape Target Directory
scripts/init_skill.py joins the user supplied skill name to the target path before creating files. A name containing path separators could write outside the intended output folder.
The script prints naming rules but does not enforce them before building skill_dir from argv. This is a direct local path traversal risk for untrusted input.
Medium
Unfiltered Packaging May Include Unintended Files
scripts/package_skill.py recursively writes every file under the selected skill directory into the .skill archive. A dirty folder could publish secrets, caches, or unrelated files.
The code includes all regular files returned by rglob without denylist, allowlist, or symlink checks. The archive is intended for distribution.
Risk Factors
⚙️ External commands (40)
scripts/init_skill.py:73 scripts/init_skill.py:74 scripts/init_skill.py:84 SKILL.md:51-62 SKILL.md:62-68 SKILL.md:68 SKILL.md:73-78 SKILL.md:78-82 SKILL.md:82-87 SKILL.md:87 SKILL.md:93-98 SKILL.md:98 SKILL.md:130-143 SKILL.md:143-151 SKILL.md:151-159 SKILL.md:159-165 SKILL.md:165-172 SKILL.md:172-180 SKILL.md:180-193 SKILL.md:193-239 SKILL.md:239-242 SKILL.md:242-244 SKILL.md:244-247 SKILL.md:247-249 SKILL.md:249-252 SKILL.md:252-262 SKILL.md:262-266 SKILL.md:266-268 SKILL.md:268-274 SKILL.md:274 SKILL.md:294 SKILL.md:298 SKILL.md:306 SKILL.md:308-309 SKILL.md:309-312 SKILL.md:312-324 SKILL.md:324-326 SKILL.md:326-330 SKILL.md:330-332 SKILL.md:332-343
📁 Filesystem access (2)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/zhanlincui-skill-creator/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/zhanlincui-skill-creator?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/zhanlincui-skill-creator?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/zhanlincui-skill-creator/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/zhanlincui-skill-creator.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
ZhanlinCui. (2026). skill-creator security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/zhanlincui-skill-creator/audits/4BibTeX citation
@techreport{zhanlincui-zhanlincui-skill-creator-2026,
author = {ZhanlinCui},
title = {skill-creator security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/zhanlincui-skill-creator/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "skill-creator security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "ZhanlinCui"
date-released: "2026-07-08"
url: "https://skillstore.io/skills/zhanlincui-skill-creator/audits/4"
identifiers:
- type: other
value: "skillstore:zhanlincui-skill-creator:audit:4"
description: "Skillstore immutable audit report identifier"
Compare variants
24 installable variantsEach author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.
Why this variant is first
Highest Skillstore Score
Author / source Skillstore Score Evidence Confidence Skillstore usage Updated
Joseph OBrien Recommended
89jobrien-skill-creator
Skillstore Score 83
Evidence Confidence High
Skillstore usage 52
Updated
2026-08-21
vercel-labs-skill-creator
Skillstore Score 81
Evidence Confidence High
Skillstore usage 27
Updated
2026-08-21
7spade-skill-creator
Skillstore Score 80
Evidence Confidence High
Skillstore usage 41
Updated
2026-08-21
daviddworetzky-skill-creator
Skillstore Score 79
Evidence Confidence High
Skillstore usage 8
Updated
2026-08-21
bom-98-skill-creator
Skillstore Score 78
Evidence Confidence High
Skillstore usage 11
Updated
2026-08-21
doyajin174-skill-creator
Skillstore Score 78
Evidence Confidence High
Skillstore usage 8
Updated
2026-08-21
cesaraugustusgrob-skill-creator
Skillstore Score 78
Evidence Confidence High
Skillstore usage 7
Updated
2026-08-21
skill-creator
Skillstore Score 76
Evidence Confidence High
Skillstore usage 42
Updated
2026-08-21
cam10001110101-skill-creator
Skillstore Score 75
Evidence Confidence High
Skillstore usage 16
Updated
2026-08-21
astrabit-cpt-skill-creator
Skillstore Score 73
Evidence Confidence High
Skillstore usage 13
Updated
2026-08-21
ZhanlinCui Current
zhanlincui-skill-creator
Skillstore Score 72
Evidence Confidence High
Skillstore usage 312
Updated
2026-08-21
barissozen-skill-creator
Skillstore Score 72
Evidence Confidence High
Skillstore usage 14
Updated
2026-08-21
abdullahmalik17-skill-creator
Skillstore Score 72
Evidence Confidence High
Skillstore usage 12
Updated
2026-08-21
langchain-ai-skill-creator
Skillstore Score 67
Evidence Confidence High
Skillstore usage 18
Updated
2026-08-21
daothihuong2111-skill-creator
Skillstore Score 67
Evidence Confidence High
Skillstore usage 11
Updated
2026-08-21
benderfendor-skill-creator
Skillstore Score 66
Evidence Confidence High
Skillstore usage 25
Updated
2026-08-21
92bilal26-skill-creator
Skillstore Score 50
Evidence Confidence High
Skillstore usage 12
Updated
2026-08-21
sickn33-skill-creator
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 45
Updated
2026-08-21
artemisai-skill-creator
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 17
Updated
2026-08-21
davila7-skill-creator
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated
2026-08-21
chinchillaenterprises-skill-creator
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated
2026-08-21
azeem-2-skill-creator
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 8
Updated
2026-08-21
davila7-skill-development
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated
2026-08-21
composiohq-skill-creator
Skillstore Score 38
Evidence Confidence Medium
Skillstore usage 7
Updated
2026-08-21
Skillstore Score
Why this score Evidence Confidence: High 64
Architecture
85
Maintainability
87
Content
77
Community
83
Spec Compliance
What You Can Build
Create a New Agent Skill
Scaffold a skill with required metadata, a clear instruction file, and optional resource folders.
Improve Skill Instructions
Refine SKILL.md content so triggers, workflow steps, and reusable resources are easier for agents to follow.
Prepare Skills for Sharing
Validate a skill folder and package it into a distributable archive for review or handoff.
Try These Prompts
Create a Basic Skill
Create a new skill for [task]. Ask only essential questions, then scaffold SKILL.md and any needed resources.
Improve an Existing Skill
Review the skill at [path]. Tighten the description, remove excess context, and validate the folder after edits.
Add Reusable Resources
For this skill idea, identify scripts, references, and assets that would reduce repeated work. Add only resources with clear reuse value.
Design and Package a Complex Skill
Plan, implement, validate, and package a skill for [domain]. Include workflow references, output patterns, and fixes for validation issues.
Best Practices
- Keep SKILL.md focused on essential procedures and move long details into references.
- Add scripts only when they improve repeatability or reduce fragile manual work.
- Run validation before packaging and review packaged contents before sharing.
Avoid
- Do not create extra documentation files that duplicate SKILL.md.
- Do not include assets, scripts, or references without clear reuse value.
- Do not package folders that contain secrets, caches, or unrelated project files.
Frequently Asked Questions
What does this skill help create?
It helps create AI skills with structured instructions, optional resources, validation, and packaging.
Does it support Claude, Codex, and Claude Code?
Yes. The guidance is useful for Claude, Codex, and Claude Code skill authoring workflows.
Can it generate a starter skill folder?
Yes. The included initializer creates a starter SKILL.md and example resource folders.
Does the validator prove a skill is secure?
No. It checks basic structure and metadata. It does not replace security review.
When should I add scripts to a skill?
Add scripts when repeated work needs deterministic execution or would be error-prone if rewritten each time.
What should I check before packaging?
Review the folder for private files, temporary outputs, unused examples, and validation failures.
Developer Details
Author
ZhanlinCuiLicense
Complete terms in LICENSE.txt
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
88a205c7f635a966e31156313b590d59007c5caa
Maintenance freshness
7/18/2026
Usage
304 downloads · 273 views
File structure
More from ZhanlinCui
View all📦
github-release-assistant
83Generate Bilingual GitHub Release READMEs
Release notes and README updates can take time before each GitHub release. This skill generates bilingual release documentation and guides review, commit, and push steps.
Documentation View
📦
obsidian-helper
81Organize Obsidian Notes with AI
Obsidian vaults can become hard to review and update consistently. This skill helps Claude and Codex create daily notes, capture ideas, and summarize recent work.
Productivity View
📦
Process PDFs with Extraction and Form Tools
PDF work often requires separate tools for text, tables, pages, and forms. This skill gives Claude, Codex, and Claude Code guided workflows and helper scripts for PDF tasks.
Office & Reports View
📦
frontend-design
79Build Distinctive Frontend Interfaces
Generic web interfaces can feel unfinished and forgettable. This skill guides Claude, Codex, and Claude Code toward polished frontend work with clear visual direction.
Design & Creative View
📦
brainstorming
79Plan Creative Work Before Building
Teams often start implementation before goals, constraints, and trade-offs are clear. This skill guides Claude, Codex, and Claude Code through structured brainstorming before design work begins.
Productivity View
Related Skills
View all📦
skill-share
81Create and Share Team Skills
by 89jobrien
Teams need a consistent way to create and distribute reusable AI skills. This skill guides creation, validation, packaging, and Slack sharing for faster discovery.
Productivity View
📦
prompt-optimization
82Optimize LLM Prompts and Agent Instructions
by 89jobrien
Weak prompts create inconsistent model outputs and slow AI feature development. This skill helps structure prompts, examples, constraints, and output formats for Claude, Codex, and Claude Code.
Productivity View
📦
prompt-template-designer
82Design Reusable AI Prompt Templates
by 92Bilal26
Repeated AI tasks often drift because useful prompt patterns stay informal. This skill helps users turn proven prompts into reusable templates with parameters and success criteria.
Productivity View
📦
project-creator
82Create CCGG Project Workspaces
by DaronVee
Project setup often misses shared operations, index, and logging requirements. This skill guides Claude, Codex, and Claude Code through structured CCGG project creation with templates and validation checks.
Productivity View
📦
write-a-skill
79Create Agent Skills
by mattpocock
Teams need consistent skill files that agents can discover and use correctly. This skill guides authors through structure, descriptions, examples, scripts, and review checks.
Productivity View
📦
skill-creation-guide
81Create Effective AI Skills
by notedit
Teams need repeatable guidance to build useful AI skills without adding unnecessary context. This skill provides a structured process for planning, writing, validating, and packaging skills.
Documentation View