Skip to content
Back to skills

Writing Skills

ASecurity

Use when creating, editing, or verifying a skill before it is enabled or deployed

  • 2 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 2, 2026
ai-agentsgosecuritydocumentation

Security analysis

A100/100

Pro scans all 8 files and shows the line behind each finding

Scanned October 2, 2026

npx -y skills add lsy041015/orchestra --skill writing-skills --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Writing Skills?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Writing Skills
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/lsy041015-writing-skills/badge)](https://www.skillsdirectory.com/skills/lsy041015-writing-skills)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: writing-skills
description: Use when creating, editing, or verifying a skill before it is enabled or deployed
---

# Writing Skills

Treat process documentation like behavior: define a pressure case, observe
the baseline, write the smallest rule that closes the observed failure, and
verify the rule against the same case. This is TDD applied to a skill. Use
`orchestra:test-driven-development` for the RED/GREEN discipline
and the [best-practices](best-practices/1-core-principles.md) parts for general authoring guidance (read only the part you need: 1 core principles, 2 skill structure, 3 workflows and content, 4 patterns and evaluation, 5 anti-patterns and code, 6 notes and checklist).

The main session owns design, baseline analysis, review, and acceptance.
Do not create evaluation, review, or analyst agents. If a pressure scenario
must exercise a delegated implementation behavior, use only an already
authorized implementer worker with the exact task scope; an evaluator
worker is outside this edition. Do not claim a scenario was run when it was
only read or imagined.

## Start with the contract

Before editing, identify:

- the skill's trigger and non-trigger;
- the behavior a user should observe;
- the repository and runtime paths the skill may mention;
- user, host, security, privacy, data-loss, accessibility, calibration, and
  hardware constraints;
- existing references and examples that must stay compatible.

Read the existing skill and exact callers before changing it. Keep the
frontmatter valid: `name` uses letters, numbers, and hyphens, and `description`
starts with `Use when...` and describes triggers rather than the workflow.
Prefer one clear rule and one concrete example over repeated warnings.

## Skill TDD

### RED: baseline

Write realistic pressure scenarios that make the unwanted behavior tempting.
Combine time, sunk cost, authority, exhaustion, or social pressure. Give the
agent concrete options and a real action to choose. Run the scenario without
the candidate rule when a baseline is meaningful: in a separate session you
start yourself, or by asking the user to run it, since this edition creates
no evaluator workers. Record the exact choice, rationalization, and evidence. If the control already behaves correctly, do
not invent a rule to solve a problem that was not observed.

### GREEN: smallest rule

Write only the guidance needed to prevent the observed violation. Make the
safe path operational: say what to inspect, which action to take, what output
to record, and when to stop. Place the key rule before long explanation. Use
conditional instructions for conditional behavior; avoid broad prohibitions
that leave the agent negotiating with the wording.

Run the same scenario with the skill and record compliance. Keep TDD, user
approval gates, and recovery rules explicit when the skill depends on them.

### REFACTOR: close evidence-backed loopholes

When a scenario still fails, record the new rationalization verbatim, update
the smallest section that closes it, and rerun the case. Do not pile up a
second copy of the workflow or universal line/word/token caps that discard
needed evidence. (Worker report budgets, such as the implementer's 40 lines,
are separate: full evidence stays in the report file and the diff.) Remove
contradictions rather than appending an override to an obsolete flow.

## Content and structure

Use this compact structure when it fits:

```markdown
---
name: skill-name
description: Use when <specific trigger>
---

# Skill Name
What problem it solves and the invariant it protects.

## When to use
Trigger and non-trigger examples.

## Workflow
The smallest actionable sequence, including stop and recovery points.

## Verification
Evidence required before claiming completion.

## Common failures
Observed rationalizations and their direct counter-action.
```

Move heavy reference material, reusable scripts, or templates into supporting
files and link them directly from `SKILL.md`. Keep references one level deep.
Use tables for repeated fields, flowcharts only for non-obvious branches, and
examples that are complete enough to run or copy. Internal links in this
edition use the `orchestra:` namespace.

## Verification before deployment

1. Validate frontmatter, links, placeholder names, and examples.
2. Search the whole `skills/` tree for stale role instructions: separate
   reviewer/analyst/planner dispatch, fresh-worker escalation, unapproved
   nested delegation, wrong model/effort, old namespace, and hidden platform
   variants.
3. Run baseline and candidate pressure cases that matter. If execution is
   unavailable, report that limitation and distinguish static inspection from
   behavioral evidence.
4. Review the actual diff for scope, contradictions, and accidental edits.
5. Re-run the relevant checks after every correction and record commands,
   exit codes, and material output.

The final report names changed files, checks actually run, behavioral evidence,
and unresolved issues. It does not claim an independent evaluation that did
not occur. Publishing, installing, or changing global configuration remains a
separate user-authorized action.

Files in this skill

  • SKILL.md5.1 KB
  • agents/openai.yaml112 B
  • best-practices/1-core-principles.md4.9 KB
  • best-practices/2-skill-structure.md11.7 KB
  • best-practices/3-workflows-and-content.md5.2 KB
  • best-practices/4-patterns-and-evaluation.md8.8 KB
  • best-practices/5-anti-patterns-and-code.md11.6 KB
  • best-practices/6-notes-and-checklist.md2.5 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…