Install
$ agentstack add skill-bennyoooo-skillmaxxing-create-skill ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
create-skill
Crystallize a workflow into a durable, tested skill. The CLI is model-agnostic: you synthesize the content (name, body, scripts, real eval tasks); the CLI stages, smoke-tests, and commits it atomically.
Two entry points
- Explicit — the user says "turn X into a skill."
- Reflection — after completing a non-trivial task, consider whether it is reusable. Fire this sparingly (review fatigue is real): only when the work was non-trivial (several steps, a fixed bug, a discovered workflow) AND plausibly recurs. When in doubt, don't interrupt.
Step 0 — Prefer update over create
Before creating, search for an existing skill that already covers this:
scripts/discover.sh "" --json
If a close match exists, update or optimize it instead of making a near-duplicate. The skillify step also runs this check and will refuse with a suggestion unless you pass --new.
Step 1 — Synthesize a draft
Write a draft JSON file. The eval scaffold MUST contain real, scorable tasks (not a stub) — pick a scorer per task: exact/normalized/code-exec/success-signal for deterministic outputs, agent-judge (with a rubric) for prose/judgment skills.
{
"name": "release-notes",
"description": "Draft release notes from a git log range.",
"body": "# release-notes\n\n...instructions...\n",
"tools": ["Bash"],
"scripts": [{ "path": "scripts/changelog.sh", "content": "#!/usr/bin/env bash\n..." }],
"eval": {
"skill": "release-notes",
"tasks": [
{ "id": "happy", "input": "v1.0..v1.1", "scorer": "agent-judge", "rubric": "Groups changes by type; no raw SHAs; user-facing tone." }
]
},
"smokeTest": ["bash", "scripts/changelog.sh", "--help"]
}
Step 2 — Stage (with the human approval gate)
scripts/skillify.sh --draft draft.json # stage; smoke test skipped unless authorized
scripts/skillify.sh --draft draft.json --allow-exec # stage AND run the smoke test in the sandbox
Only pass --allow-exec after the user has reviewed the generated scripts — a freshly synthesized skill is trusted: false, and running its code is a deliberate, user-authorized step. Show the staged SKILL.md and scripts to the user and get explicit approval before committing.
Step 3 — Commit
scripts/skillify.sh --commit [--global] [--agent ]
This installs the skill (trusted: false) and clears the draft. Staged drafts persist across sessions — resume with --list-drafts then --commit.
Safety
- The smoke-test/exec gate is yours to honor: never pass
--allow-execwithout fresh user authorization for the specific scripts. - Do not commit a skill whose smoke test failed; fix the draft and re-stage.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: Bennyoooo
- Source: Bennyoooo/skillmaxxing
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.