Install
$ agentstack add skill-hoangnguyen0403-agent-skills-standard-common-skill-creator ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Agent Skill Creator Standard
Priority: P0 — Apply to ALL skills
Maximize Token ROI. Every line in SKILL.md must provide specific procedural value. Activation (how it triggers) and Implementation (how it helps) primary quality metrics.
Three-Level Loading System
- Level 1 Frontmatter:
name+description(Activation Anchor), ≤100 words. - Level 2 SKILL.md body: Core Rules + Workflows (Implementation Core), ≤100 lines.
- Level 3 references/: Detailed examples, schemas, and "TESTS.md" (On-demand).
Workflow (New or Existing Skill)
New skill:
- Research — web-search domain best practices, checklists, and standards; extract key terms → triggers, workflows → guidelines, mistakes → anti-patterns. See [Web Search Research](references/web-search-research.md).
- Capture intent — what it , when it trigger, expected output format?
- Draft the SKILL.md — draft using [TEMPLATE.md](references/TEMPLATE.md)
- Test — spawn parallel subagents: one with-skill, one without-skill (baseline)
- Evaluate — grade assertions, review benchmark (pass rate, tokens, time)
- Iterate — rewrite based on feedback, rerun into next iteration dir, repeat
- Optimize description — run trigger eval queries, target ≥80% accuracy
- Pressure-test — for discipline skills, capture agent excuses, red flags, and stop conditions
Existing skill:
- Audit — run Quality Checklist below; identify violations
- Snapshot —
cp -r /skill-snapshot/before any edits - Improve SKILL.md — fix violations, compress, move oversized content to
references/ - Test — spawn parallel subagents: one with-new-skill, one with-snapshot (baseline)
- Evaluate & iterate — same as steps 4–5 above
- Optimize description — re-run trigger eval if description changed
- Harden — add rationalization counters where agents still fail under pressure
See [Eval Workflow](references/eval-workflow.md) for full testing + iteration details.
Description Quality (Activation)
- Third-Person Voice: Use
Standardizes...,Audits...,Encrypts.... Avoid "I will" or "This skill helps to". - What + When Structure:
- What: Define 5–8 specific capabilities (e.g., "Generates JWT tokens, rotates keys").
- When: Explicitly define triggers (e.g., "Use when user says 'rotate keys'").
- Specificity: Avoid vague verbs like "manage" or "handle". Use "Validate", "Inject", "Refactor", "Sanitize".
- Trigger Hint: Include
(triggers: *.ext, keyword)suffix for technical skills.
Content Quality (Implementation)
- No Redundant Knowledge: NOT explain concepts AI already knows (e.g., HTTP status codes, standard library docs, basic SOLID principles). Focus strictly on project-specific rules.
- Caveman Compression: Use "Caveman Mode" for rules to save tokens. Drop articles (, , ), remove filler words ("should", "will", "), and use telegraphic snippets.
- Standard: "You should ensure that database connection closed after every query to prevent leaks." (15 tokens)
- Caveman: "Close DB connection after query. Prevent leaks." (7 tokens)
- Actionability: Examples must copy-paste ready and executable.
- Workflow Clarity: Use sequential ordered lists for multi-step processes.
- Progressive Disclosure: Move code blocks >10 lines to
references/. - Pressure Hardening: Discipline skills must name red flags, common excuses, and exact stop/restart conditions.
Behavior Guardrails
- Use pressure tests for discipline skills: TDD, debugging, verification, review, protocol, and workflow skills need baseline failure evidence.
- Capture rationalizations: Save the exact excuses agents use when they skip the rule.
- Add red flags: Short phrases that tell the agent to stop and restart the protocol.
- Encode behavior in evals: Add
pressure_scenarios,rationalizations,red_flags, andbehavior_assertionswhen the skill is guardrail-oriented. - Keep it local: Put behavior details in evals or
references/; keepSKILL.mdcompact.
Anti-Patterns
- No "AI-splaining": not explain why pattern good unless it's unique project constraint.
- No Vague Triggers: Never use
src/**or**/*. surgical. - No Description Bloat: If description exceeds 100 words, some capabilities belong in body.
- No long code blocks: >10 lines → extract to
references/ - No redundancy: don't repeat frontmatter content in body
- No untested guardrails: Rules that were never pressure-tested are speculation.
Quality Checklist (Tessl-Aligned)
- [ ] Activation ≥ 90%: Description covers both capabilities ("What") and triggers ("When").
- [ ] Implementation ≥ 90%: No general-purpose explanations; all examples executable.
- [ ] Structural Compliance: SKILL.md ≤ 100 lines; code blocks moved to
references/. - [ ] Trigger rate ≥80% on should-trigger queries.
- [ ] Guardrail skills include rationalizations, red flags, and behavior eval fields.
References
- [Skill Template](references/TEMPLATE.md) — load when starting new skill from scratch
- [Anti-Patterns Detail](references/anti-patterns.md) — load when fixing or reviewing anti-pattern format
- [Size & Limits](references/size-limits.md) — load when SKILL.md approaches 100 lines
- [Resource Organization](references/resource-organization.md) — load when deciding where to place content (scripts/, references/, assets/)
- [Testing & Trigger Rate](references/testing.md) — load when writing evals or measuring trigger rate
- [Eval Workflow](references/eval-workflow.md) — load when running parallel subagent tests
- [Full Lifecycle](references/lifecycle.md) — load for complete phase-by-phase creation guide
- [Web Search Research](references/web-search-research.md) — load when creating skill for unfamiliar or non-engineering domain
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: HoangNguyen0403
- Source: HoangNguyen0403/agent-skills-standard
- License: Apache-2.0
- Homepage: https://www.npmjs.com/package/agent-skills-standard
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.