AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Skill Engineer

skill-betterlmy-agent-skills-skill-engineer · by betterlmy

Create, improve, and review production-ready agent skills with concise structure, strong trigger descriptions, bundled resources, validation, and realistic forward testing. Use when the user wants to write a new skill, make an existing skill production-ready, audit or review a skill, compare skill-creator approaches, or decide whether a skill needs scripts, references, assets, metadata, packaging…

No reviews yet
0 installs
18 views
0.0% view→install

Install

$ agentstack add skill-betterlmy-agent-skills-skill-engineer

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-betterlmy-agent-skills-skill-engineer)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
22d ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Skill Engineer? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

Skill Engineer

Operating Mode

First classify the request:

  1. Create: user wants a new skill.
  2. Review: user wants an existing skill audited.
  3. Improve: user has a draft or installed skill and wants it production-ready.
  4. Evaluate: user asks whether a skill actually works better than no skill or an older version.

For create/improve work, prefer the host's official skill initializer when one exists. In Codex, default new user skills to ${CODEX_HOME:-$HOME/.codex}/skills unless the user names another path. For review-only work, do not edit until the user asks for changes or the issue is clearly meant to be fixed.

Production Standard

A production-ready skill is:

  • Discoverable: frontmatter description names both capability and concrete trigger contexts.
  • Small by default: keep SKILL.md close to 100 lines when practical; split rare or detailed material into one-level references/ files.
  • Operational: deterministic or repeated work lives in scripts/; reusable output material lives in assets/.
  • Portable: avoid private paths, time-sensitive facts, hidden environment assumptions, and tool names that are not actually available.
  • 命令兼容:依赖外部命令行工具的 Skill 必须声明自包含的版本与能力契约,并验证运行时能力,不得假设文档与已安装工具一致。
  • Independent: a packaged skill does not name, invoke, link to, or depend on sibling skills; central repository indexes own cross-skill routing and composition guidance.
  • Validated: run available validators and the bundled static audit script.
  • Forward-tested: important skills are tried on realistic prompts, preferably against a no-skill or previous-version baseline.

Create Workflow

  1. Capture concrete use cases before writing.

Ask only for missing information: task/domain, trigger phrases, expected outputs, required tools, reference material, and whether tests matter.

  1. Name the skill with lowercase letters, digits, and hyphens. Prefer action or role names, for example review-api-contracts or skill-engineer.
  2. Draft a pushy but accurate description:
  • First sentence: what the skill does.
  • Second sentence: "Use when..." with triggers, file types, domains, and user intents.
  • Keep it under 1024 characters and avoid angle brackets.
  1. Keep SKILL.md as the route map. Move detail into references/ when it is long, domain-specific, or rarely needed.
  2. Add scripts only when they remove repeated code generation, make validation deterministic, or handle fragile file operations.
  3. Add agents/openai.yaml when the environment supports it. Keep UI metadata aligned with the actual skill.
  4. Validate and forward-test before calling the skill production-ready.

Review Workflow

For reviews, read the skill directory first: SKILL.md, metadata files, scripts, references, assets list, and any tests/evals. Check that every required workflow, resource, fallback, and validation step remains usable when the skill is installed by itself. Then run:

python3 scripts/audit_skill.py 

Use [references/review-rubric.md](references/review-rubric.md) for severity and findings. Lead with bugs and production risks, not praise. Give file/line references where possible.

审查调用外部命令行工具的 Skill 时,遵循 [外部命令兼容性契约](references/external-command-compatibility.md),验证其基线版本、能力探测、版本不一致处理和安装边界。

Evaluation Workflow

Use [references/eval-workflow.md](references/eval-workflow.md) when the skill is important, ambiguous, or user-facing enough that static review is not enough.

Minimum viable evaluation:

  1. Pick 2-3 realistic prompts, including one edge case and one near miss.
  2. Run with the skill and compare against no skill or the previous version.
  3. Record output quality, missing steps, unnecessary work, token/time if available, and whether the description triggered appropriately.
  4. Revise the skill based on generalizable failures, not overfit examples.

Domain-Specific Guardrails

When creating SDK/API skills, require current source material such as package name, official docs URL, repo, or local implementation. For Azure SDK or Microsoft Foundry skills, follow Microsoft-style constraints: fresh docs first, explicit auth/lifecycle guidance, language-specific client setup, and test scenarios.

For generic productivity or coding skills, favor the Matt Pocock constraint: shorter SKILL.md, concrete examples, one-level references, and clear review checklist.

For critical production skills, borrow the Anthropic pattern: baseline comparison, user-visible review artifacts, objective assertions where possible, and trigger-description tests for should-trigger and should-not-trigger prompts.

Completion Criteria

Before finishing, report:

  • Skill path and name.
  • What files changed.
  • Validation commands run and results.
  • Forward tests run, or why they were skipped.
  • Any remaining risks or recommended follow-up.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.