Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsBlogPro
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges
  • Chrome Extension
  • Skill Manager

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Skill Creator

ASecurity

Guide for authoring a new agav skill (SKILL.md)

147 stars
0 votes
0 copies
0 views
Added 9/3/2026
ai-agentsshelltestinggit

Security Analysis

A100/100

Scanned 9/3/2026

$npx -y skills add prapaa-ai/agav --skill skill-creator --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Skill Creator?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Skill Creator
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/prapaa-ai-skill-creator/badge)](https://www.skillsdirectory.com/skills/prapaa-ai-skill-creator)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
Files
SKILL.md
---
name: skill-creator
description: Guide for authoring a new agav skill (SKILL.md)
version: 1.0.0
invocation: user
allowed-tools: read_file write_file edit_file find_files list_directory run_command
tags:
  - meta
  - authoring
---

# Skill Creator

Create a new skill for agav: a directory containing a SKILL.md file with YAML frontmatter and Markdown instructions.

## Instructions

1. Interview the user first:
   - **What task** should the skill handle, and what triggers it? (a phrase they type, a situation the agent should notice)
   - **Who is it for**: just them, their team, or public sharing?
   - **What tools** does the task need: reading files, writing files, running commands, web access?
2. Ask the user for an example of the task done well (a past output, an email they like) — real examples make skills far better than abstract descriptions.
3. Create the skill as `<slug>/SKILL.md` where `<slug>` is lowercase-with-hyphens and matches the `name` field. Location:
   - Personal skills: inside the agav config directory's `skills` folder — run `/skills` in a session to see the exact path for your platform.
   - Project skills: `.agav/skills/<slug>/SKILL.md` in the repo root — these override bundled/global skills of the same name.
4. Use this frontmatter format (all fields shown; minimum is name + description):

   ```yaml
   ---
   name: my-skill
   description: One line — what it does and when to use it (this is what the agent sees when deciding to trigger)
   version: 1.0.0
   invocation: both   # user = manual /skill only, agav = auto-trigger only, both = either
   allowed-tools: read_file write_file run_command
   tags:
     - topic
   ---
   ```

5. Rules that matter:
   - `description` is the trigger — write it as "does X for Y situations", not marketing copy.
   - Allowed tools are validated against agav's known tools: read_file, write_file, edit_file, run_command, grep_search, find_files, list_directory, web_search, lsp_query, read_notebook, edit_notebook, fetch_url, update_plan, github, overview, run_tests, save_memory, subagent, activate_skill. An unknown name silently drops that tool.
   - The body is instructions to the agent. Number the steps. State what to do when inputs are missing, and what NOT to do (never invent data, never overwrite originals).
   - The body must not contain prompt-injection phrasing or destructive shell patterns (e.g. force-deleting from filesystem root, piping downloads into a shell) — validation rejects those patterns and such examples trip the scanner even in prose.
   - Keep the whole file under 64KB; a focused skill beats a sprawling one.
6. After writing the file, verify it loads: run the skill with `/skills` in the session or restart agav and check it appears. If it does not load, check YAML indentation (two spaces, no tabs) and that `name` matches the directory.
7. Skills bundled into the agav repo itself (source/skills/bundled/) additionally require running `pnpm gen:skills` so the manifest picks them up — for personal and project skills this is not needed.
8. Suggest testing with one real task, then tightening the instructions wherever the agent guessed wrong.

Attribution

prapaa-aiprapaa-ai
View sourceSee grades on GitHubMore from prapaa-ai →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Caveman

Terse caveman voice: answer first, fluff gone, every technical fact kept. Use for /caveman, "caveman mode", "talk like caveman", "be brief", "less tokens". Stays on until "stop caveman" or "normal mode".

1100021 votes

Hyperplan

Adversarial multi-agent planning skill. Self-orchestrates 5 hostile category members (unspecified-low, unspecified-high, deep, ultrabrain, artistry) via team-mode for ruthless cross-critique debate, distills only the defensible insights, then MANDATORILY hands the distilled insight bundle to the `plan` agent for executable plan formalization. Use when planning needs maximum rigor and surfacing of weak assumptions, blind spots, and over-engineering. Triggers: 'hyperplan', 'hpp', '/hyperplan', ...

698431 votes

Writing Skills

Create and manage Claude Code skills in HASH repository following Anthropic best practices. Use when creating new skills, modifying skill-rules.json, understanding trigger patterns, working with hooks, debugging skill activation, or implementing progressive disclosure. Covers skill structure, YAML frontmatter, trigger types (keywords, intent patterns), UserPromptSubmit hook, and the 500-line rule. Includes validation and debugging with SKILL_DEBUG. Examples include rust-error-stack, cargo-dep...

3931 votes

Mcp Code Execution

Routes multi-tool workflows through MCP servers for large datasets and pipelines. Use when Bash tool overhead is limiting throughput on data-heavy tasks.

3421 votes

catchup

Recovers the conversation and failed tool calls of a previous Codex, Amp, Claude Code, Antigravity, Cline, Copilot CLI, Cursor, DeepSeek Harness, Grok Build, Kimi, OpenCode, Pi Agent, or ZCode session. Use when the user says "catch up", "what did the last session do", "get me up to speed", "I switched agents", asks to recover/summarize a previous session before continuing, or asks to diagnose or report a catchup failure. Do NOT use for the current conversation, git history, or any non-agent log.

741 votes
View all in ai-agents →