skill-creator
Guide for creating new skills, improving existing skills, and evaluating skill quality.
Skill by Threat-Vector-Security
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/threat-vector-security-skill-creator
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: productivity, agent-building
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/skill-creator
What's inside
- Skill name
skill-creator- Description
- Guide for creating new skills, improving existing skills, and evaluating skill quality. Use this whenever the user wants to turn a workflow into a skill, revise a skill, improve triggering behavior, or add evals and benchmarks for a skill.
- License
- Apache-2.0
- Instructions
- 64 lines in SKILL.md · view on GitHub
Files (3)
- SKILL.md
- eval-rubric.md · references/
- trigger-authoring.md · references/
SKILL.md (first lines)
# Skill Creator Treat skill work as an eval-driven workflow: understand real usage, draft the skill, test trigger behavior, compare against baseline behavior, and refine it. ## Start With Intent Extract as much as possible from the current conversation before asking for more: - what the skill should help with - when it should trigger - what good output looks like - whether the task needs deterministic evals or mostly qualitative review When the workflow is still vague, capture 2-3 realistic user prompts before writing the skill. ## Drafting Rules - Put trigger guidance in the frontmatter description, not only in the body. - Make the description describe when to use the skill, not the full workflow inside the skill. - Prefer trigger symptoms and task conditions over abstract labels. - Keep the skill body procedural and easy to scan. - Move large supporting material into `references/`, `templates/`, or `examples/`. - Keep `SKILL.md` focused on the workflow. Put heavy reference content in `references/`. - If the skill is imported or adapted from a third-party source, preserve provenance and license notices in `THIRD_PARTY_NOTICES.md`. ## Trigger Authoring - Write the description as activation guidance, not marketing copy. - Treat the description field as model-facing trigger text; keep it high-signal because the runtime scores it alongside explicit keywords. - Include the user signals that should cause the skill to trigger. - Include nearby non-trigger cases when they are easy to confuse. - Prefer concrete request language over broad nouns like "help", "workflow", or "tool". - Keep automatically matched keywords narrow; generic words create noisy false positives. - If the skill should rarely auto-select, prefer explicit mention and description fallback over a wide keyword list. ## Improvement Loop 1. Draft or revise the skill. 2. Write 2-3 realistic test prompts. 3. Compare with-skill behavior against a baseline when possible. 4. Check two things separately: - Did the skill trigger when it should? - Did the full skill body improve behavior after triggering? 5. Capture what improved, what regressed, and what still feels vague. 6. Tighten the description and instructions, then test again. ## Evaluation Guidance - Use objective checks for transforms, extraction, formatting, and code generation. - Prefer qualitative review for tone, design, or open-ended writing. - Name evals by the behavior they test. - Keep assertions specific enough that a weak answer cannot pass by accident. - When the change affects runtime skill behavior, update `docs/design/SKILLS-DESIGN.md` in the same pass. ## Gotchas - Do not stuff reference material into `SKILL.md` when a `references/` file would keep the workflow clearer. - Do not create huge keyword lists to compensate for a vague description. - Do not add scripts unless they replace repeated boilerplate or materially improve determinism. Read [references/eval-rubric.md](./references/eval-rubric.md) when you need a compact checklist for writing or reviewing skill evals. Read [references/trigger-authoring.md](./references/trigger-authoring.md) when you need examples for writing descriptions and no-trigger prompts.
From Threat-Vector-Security/guardian-agent, Apache-2.0.
More from Threat-Vector-Security/guardian-agent
- 0.601score
security-triage
Threat-Vector-Security
Use when the user is reviewing a security alert, posture change, suspicious network behavior, firewall issue, or combined monitoring output.
SkillBFreshness: B★ 13Claude Code +9 - 0.601score
source-driven-development
Threat-Vector-Security
Use when implementing or reviewing framework-specific code that should be verified against current official docs, versioned guidance, or source-cited examples…
SkillBFreshness: B★ 13Claude Code +9 - 0.601score
context-engineering
Threat-Vector-Security
Use when starting a repo-grounded task, switching subsystems, or when output quality drops and the agent needs tighter project context from rules, specs…
SkillBFreshness: B★ 13Claude Code +9 - 0.600score
systematic-debugging
Threat-Vector-Security
Use when encountering a bug, failing test, broken integration, or unexpected behavior, before proposing fixes.
SkillBFreshness: B★ 13Claude Code +9 - 0.598score
mcp-builder
Threat-Vector-Security
Guide for building high-quality MCP (Model Context Protocol) servers and tool suites.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
coding-workspace
Threat-Vector-Security
Use when the request is about a repo, codebase, implementation, bugfix, or backend-owned coding session that should stay anchored to the active workspace.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
deep-research
Threat-Vector-Security
Use when the task needs investigation first, especially to compare code paths, trace behavior, or synthesize findings before implementation.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
code-review
Threat-Vector-Security
Use when reviewing a diff, PR, or patch for bugs, regressions, missing tests, architecture risk, security risk, or reviewability concerns before merge.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
receiving-code-review
Threat-Vector-Security
Use when addressing code review or QA feedback, especially when the feedback is unclear, broad, or technically questionable.
SkillBFreshness: B★ 13Claude Code +9 - 0.571score
verification-before-completion
Threat-Vector-Security
Use when about to claim work is complete, fixed, or passing, or before committing or handing off results.
SkillBFreshness: B★ 13Claude Code +9 - 0.571score
coding-backend-orchestration
Threat-Vector-Security
Use when the user explicitly asks Guardian to launch or check an external coding assistant such as Codex, Claude Code, Gemini CLI, or Aider.
SkillBFreshness: B★ 13Claude Code +9 - 0.570score
test-driven-development
Threat-Vector-Security
Use when implementing or changing code behavior, before writing production code.
SkillBFreshness: B★ 13Claude Code +9
Signals
- Stars
- 13
- Forks
- 3
- Open issues
- 0
- Last commit (this folder)
- Apr 19, 2026 (6 months ago)
- Last release
- Sep 9, 2026 (1 month ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- Apache-2.0
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from Threat-Vector-Security
- 0.601score
security-triage
Threat-Vector-Security
Use when the user is reviewing a security alert, posture change, suspicious network behavior, firewall issue, or combined monitoring output.
SkillBFreshness: B★ 13Claude Code +9 - 0.601score
source-driven-development
Threat-Vector-Security
Use when implementing or reviewing framework-specific code that should be verified against current official docs, versioned guidance, or source-cited examples…
SkillBFreshness: B★ 13Claude Code +9 - 0.601score
context-engineering
Threat-Vector-Security
Use when starting a repo-grounded task, switching subsystems, or when output quality drops and the agent needs tighter project context from rules, specs…
SkillBFreshness: B★ 13Claude Code +9 - 0.600score
systematic-debugging
Threat-Vector-Security
Use when encountering a bug, failing test, broken integration, or unexpected behavior, before proposing fixes.
SkillBFreshness: B★ 13Claude Code +9 - 0.598score
mcp-builder
Threat-Vector-Security
Guide for building high-quality MCP (Model Context Protocol) servers and tool suites.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
coding-workspace
Threat-Vector-Security
Use when the request is about a repo, codebase, implementation, bugfix, or backend-owned coding session that should stay anchored to the active workspace.
SkillBFreshness: B★ 13Claude Code +9
Cite this page
skill-creator. Agent Mart. https://agentmart.dev/skills/threat-vector-security-skill-creator (last updated 2026-10-24)