Install
$ agentstack add skill-spencerpauly-skills-repo-suggesting-skills ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Suggesting Skills
Find the gaps in the user's skill library. Skills are most valuable when they capture the things the user would otherwise have to explain to the agent every time.
When to use
- The user explicitly asks "what skills am I missing", "what should I add", "audit my skills".
- You notice the same kind of request happening repeatedly in a session — that's a skill waiting to be written.
- After a long session, before the user closes the chat, offer to extract any reusable playbook from the work just done.
Steps
- Inventory what's already there. Read every
SKILL.mdin the repo. Note for each: name, the trigger phrase in the description, and the one-line goal. If two existing skills overlap, flag the duplication.
- Look for the pattern of "I keep telling you to…". Strong candidates for new skills are:
- Repeated workflow — the user has asked for the same multi-step task at least twice.
- Repeated correction — the user has had to fix the same kind of mistake the agent makes (formatting, voice, missing a step).
- Tribal knowledge — facts about this user's stack, team, or product that aren't in the codebase but the user keeps having to restate.
- External tool wiring — the user has an MCP, CLI, or API the agent could be using but isn't.
- Propose 3–5 candidate skills, each as a one-paragraph pitch:
`` Name: kebab-case-name Trigger: when the user says "..." or asks to "..." What it does: one sentence Why it's worth a skill: the repeated thing it replaces ``
- Rank them. Sort by frequency × annoyance: how often does the situation come up, and how painful is it when it's not automated?
- Ask the user which 1–2 to actually write. Don't auto-generate all of them. Skills that aren't trusted get ignored, which is worse than not having them.
- For each chosen skill, scaffold a
SKILL.mdinskills//with:
- Frontmatter (
name,descriptionwith trigger phrases,license). - "When to use" — the trigger conditions, in plain English.
- "Steps" — numbered, imperative.
- "Don't" — the failure modes you've seen.
Output format
## Existing skills (N)
- skill-name — what it does, when it fires.
## Suggested additions
1. **** — _(seen X times this session)_
2. ...
## Candidate skill files
Don't
- Don't suggest a skill for something the agent already does well by default. Skills are for the cases where the un-prompted behavior is wrong.
- Don't propose 20 skills. The repo gets noisy and the agent's skill-selection routing degrades. 5–15 well-trusted skills > 50 mediocre ones.
- Don't write the SKILL.md without the user's go-ahead. Half the value of a skill is that the user trusts it; that requires their hand on the design.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: spencerpauly
- Source: spencerpauly/skills-repo
- License: MIT
- Homepage: https://skillsovermcp.com
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.