Install
$ agentstack add skill-latticecast-claude-skills-agent-claude-skills-guideline ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Skills = Library Dependencies
A skill is a lib. Design it like one:
- SKILL.md = public API — always loaded, keep it thin
- Sub-files = implementation — lazy-loaded, zero cost until
Read Skill(name)= import — compose skills like importsuser-invocable: false= private package — internal lib, not user-facing
Don't dump everything into SKILL.md. Split by load frequency, not by topic.
Real Examples
developing-programming/ # lib with 3 modules
├── SKILL.md # public API: workflow overview
├── developing.md # impl: test/format/lint/commit steps
└── writelog.md # impl: changelog/version logic
agent-claude-bot/ # lib with sub-packages
├── SKILL.md # public API: bot overview + rules
├── plan/ # sub-package: planning phase
└── example-scripts/ # sub-package: reference scripts
developing-project-management/ # lib with lazy deps
├── SKILL.md # public API: daily ticket ops
├── setup.md # lazy dep: first-time project init
└── endpoints.md # lazy dep: full API reference
Rule-based > LLM for infrastructure
When designing scripts that orchestrate LLM workers:
- Rule-based (bash/python) for infrastructure — PM status updates, git commit/merge, doc logging, ticket querying. Deterministic, no hallucination.
- LLM only for creative work — reading code, writing implementation, debugging errors.
Wrap tools as bash helpers
# Good: bash helper, always correct
pm_set_status() {
curl -s -X PUT ".../rows/${ROW_NUMBER}" -d '{"row_data": ...}'
}
# Bad: asking LLM to write curl
step "update-status" "Update PM status to in_progress via curl PUT..."
Example: orchestrator = pure rule-based
orchestrator.sh — NO LLM at all. Pure bash+python:
- Query PM API for todo tickets
- Assign to workers
- Monitor timeouts
- Collect results
Example: worker = bash infra + LLM code
worker.sh — bash handles git/PM, LLM writes code:
bash: pm_set_status "in_progress" ← deterministic
bash: pm_append_doc "Started" ← deterministic
LLM: step "implement" "..." ← creative (read + write code)
bash: pm_set_status "testing" ← deterministic
LLM: step "test" "..." ← creative (run + fix tests)
bash: git add && git commit ← deterministic
bash: pm_set_status "done" ← deterministic
Why: LLM can't be trusted with POST vs PUT, correct curl flags, git merge order. It will hallucinate. Bash is deterministic.
Rules
- MUST bump version on ANY edit. Every SKILL.md frontmatter has
version:. Patch (0.1.1) for fixes, minor (0.2.0) for features. No exceptions. - Submodule commit.
.claude/skills/is a git submodule. After editing:cd .claude/skills && git add && git commit, thencd .. && git add .claude/skills && git commitin parent repo. - SKILL.md < 500 lines. Split or decompose.
- Split by load frequency. Always → SKILL.md. Once → setup.md. On-demand → reference.md.
- Sub-files = zero context cost until explicitly read.
- Rule-based for infra, LLM for code. Never ask LLM to do git, PM, or curl for status updates.
- 精簡但深邃。AI秒懂。 Every line carries weight. No filler.
See [creating.md](creating.md) for syntax/frontmatter reference.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: LatticeCast
- Source: LatticeCast/claude-skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.