Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

Back to skills

Skill Create

ASecurity

Analyze the repository's technology stack and generate appropriate skills, rules, and hook configurations.

7 stars
0 votes
0 copies
0 views
Added 9/22/2026
developmentpythongoswiftbashsqlreactdjangorailsapidocumentation

Works with

api

Security Analysis

A100/100

Scanned 9/22/2026

Install to Claude Code

$npx -y skills add joris887/exosuit --skill skill-create --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Skill Create?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Skill Create
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/joris887-skill-create/badge)](https://www.skillsdirectory.com/skills/joris887-skill-create)

More formats (shields.io, HTML) on the badges page.

Download Zip
Files
SKILL.md
---
name: skill-create
version: 2.4.0
description: Analyze the repository's technology stack and generate appropriate skills, rules, and hook configurations.
trigger: manual
depends-on: []
references: []
disable-model-invocation: true
user-invocable: true
allowed-tools: Read, Glob, Grep, Bash, Edit, Write
---
______________________________________________________________________

## skill-create

Analyzing repository and generating technology skills.

## 1. Scan Repository

Identify technologies, frameworks, and tools in use:

### 1a. Parse dependency files

Scan for all dependency/config files in the project:

- `package.json`, `pyproject.toml`, `Cargo.toml`, `Package.swift`
- `go.mod`, `pom.xml`, `build.gradle`, `Gemfile`, `composer.json`
- `.pre-commit-config.yaml`, CI configuration files

### 1b. Scan imports and usage

Identify major technology areas by scanning source code imports and configuration files.

### 1c. Check existing skills

Read `.claude/skills/SKILLS_INVENTORY.md` to avoid creating duplicates.

## 2. Classify Technologies

Categorize each technology by impact and relevance:

| Category                                  | Examples                     | Skill Priority                         |
| ----------------------------------------- | ---------------------------- | -------------------------------------- |
| **Core Framework** (>20% of codebase)     | React, Django, Rails, SwiftUI | High — create skill + reference doc    |
| **Major Library** (significant usage)     | SQLite, Redis, Prisma        | Medium — create skill                  |
| **Build/Dev Tool** (development workflow) | webpack, jest, ruff          | Low — create skill if complex          |
| **Minor Dependency** (small usage)        | lodash, httpx, pydantic      | Skip — standard usage, no skill needed |

### Decision Criteria for Reference Documents

Create reference docs **co-located with the skill** (`.claude/skills/<tech-name>/references/`) when:

- Technology is core (>20% of codebase interaction)
- API is complex with project-specific patterns
- Version-specific gotchas exist that an LLM would miss
- Official documentation is large and we use a specific subset

Co-locating references with skills keeps everything self-contained and allows relative path references from SKILL.md.

Skip reference doc when:

- Usage is standard/well-known (e.g., JSON, basic HTTP)
- Official docs are concise and sufficient
- No project-specific patterns worth documenting

## 3. Generate Skills

For each technology that warrants a skill, scaffold using:

```bash
bash scripts/init-skill.sh <tech-name>
```

Execute directly — do NOT read script source first.

### Skill File Structure

```
.claude/skills/<tech-name>/
├── SKILL.md              # Lean (<100 lines): purpose, version, key patterns, pointers
└── references/            # Loaded on demand
    ├── api.md             # API patterns and quick reference
    ├── gotchas.md         # Version-specific issues and workarounds
    └── examples.md        # Code snippets from the actual codebase
```

### SKILL.md Content (keep under 100 lines)

Each generated skill SKILL.md should include:

1. **Purpose:** What this technology does in the project
1. **Version:** Specific version in use (pinned)
1. **Patterns:** Project-specific patterns and conventions (brief)
1. **Common Tasks:** How to accomplish typical tasks (brief)
1. **Pointers:** "See `references/api.md` for detailed API patterns" etc.

Move detailed content to references/ to keep SKILL.md lean. The context window is a shared resource — only load detail when needed.

### Reference Doc Template (when created, co-located in references/)

```markdown
# <Technology> Reference (v<version>)

## Usage in This Project
<What we use it for, how it fits in the architecture>

## Key Patterns
<Project-specific patterns with code examples>

## API Quick Reference
<The subset of the API we actually use>

## Configuration
<Our configuration settings and why>

## Gotchas
<Version-specific issues, known bugs, workarounds>

## Official Documentation
<Links to official docs for our version>
```

## 4. Generate Path-Scoped Rules

For detected file types that don't already have rules:

- If a linter/formatter was detected, create or update rules referencing its config
- If the project has specific file patterns (e.g., `*.component.tsx`, `*.service.py`), add path-scoped rules for those patterns
- Create per-module rules if major modules have distinct conventions

Save rules to `.claude/rules/<rule-name>.md` with YAML frontmatter containing `paths:`.

## 5. Configure Hooks

Based on detected tools:

- **Formatter found** → Configure `post-edit-format.sh` for the detected formatter
- **Linter found** → Add to `.claude/hooks/rules/quality.yaml`
- **Type checker found** → Add to `.claude/hooks/rules/quality.yaml`
- **Test runner found** → Add to `.claude/hooks/rules/quality.yaml`

Update `.claude/hooks/` scripts and `.claude/settings.json` as needed.

## 6. Version Management

For each technology with a reference doc:

- Record the current version
- Note when the reference doc was last verified
- Flag if a major version update is available

## 7. Update Inventory

After creating all skills:

- Run `bash scripts/update-registry.sh` to regenerate `skills-registry.json`
- Update `.claude/skills/SKILLS_INVENTORY.md` with new technology skills
- Add entries to the Technology Skills category
- List each skill with its technology, version, and whether it has a reference doc

## 8. Output

Present a summary:

```markdown
### Skill Creation Complete

**Technologies analyzed:** [count]
**Skills created:** [count]
**Reference docs created:** [count]
**Rules created:** [count]
**Hooks configured:** [list]
**Skills skipped (already exists or not needed):** [count]

#### Created Skills:
| Technology | Skill | Reference Doc | Version |
|---|---|---|---|
| [name] | `/[skill-name]` | Yes/No | [version] |

#### Rules Created:
| Rule | Paths | Purpose |
|---|---|---|
| [name] | [patterns] | [what it enforces] |

#### Skipped (standard/minor):
- [list of technologies that didn't warrant skills]
```

## Common Mistakes — NEVER:

| Bad Output | Why It's Wrong | What To Do Instead |
|---|---|---|
| Generic content Claude already knows | Wastes context window on every invocation | Only include project-specific patterns and gotchas |
| Skill >150 lines without references/ | Exceeds context budget | Split into lean SKILL.md + references/ |
| Examples from training data, not codebase | Doesn't match project conventions | Use actual code from the repo as examples |
| Documenting standard API usage | Claude knows standard APIs | Document project-specific patterns and version gotchas |

## Rules

- NEVER create skills for trivial/standard technologies (basic Python, JSON, HTTP)
- NEVER duplicate content that's already in existing skills
- ALWAYS pin versions in reference docs
- ALWAYS include examples from the actual codebase, not generic examples
- ALWAYS check for existing skills before creating new ones
- Reference docs go in `.claude/skills/<name>/references/` (co-located with the skill)
- Follow the skill template in `.claude/skills/SKILL_TEMPLATE.md`

Attribution

joris887joris887
View sourceMore from joris887 →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Browser Extension Developer

Use this skill when developing or maintaining browser extension code in the `browser/` directory, including Chrome/Firefox/Edge compatibility, content scripts, background scripts, or i18n updates.

284072 votes

Seo Optimizer

SEO optimization with keyword analysis, readability assessment, technical validation, content quality. Use for search rankings, blog posts, content audits, or encountering keyword density, readability scores, meta tags, schema markup errors.

2192 votes

Google Official Seo Guide

Official Google SEO guide covering search optimization, best practices, Search Console, crawling, indexing, and improving website search visibility based on official Google documentation

1862 votes

Tanstack Start

Build a full-stack TanStack Start app on Cloudflare Workers from scratch — SSR, file-based routing, server functions, D1+Drizzle, better-auth, Tailwind v4+shadcn/ui. Use whenever the user mentions TanStack Start, asks to scaffold a full-stack Cloudflare app with SSR, wants an SSR dashboard, or asks for a React 19 + Cloudflare Workers app with file-based routing and server functions — even if they don't name TanStack Start specifically. No template repo — Claude generates every file fresh per ...

9881 votes

Pentest

PTES-aligned adversarial security audit for backend, frontend, and mobile applications. Produces a CVSS-scored Hacker Report with verified PoCs and phased remediation.

5491 votes
View all in development →