What is skill-to-command-author?

An authoring agent for converting a reusable coding skill into a slash command and supporting sub-agents. A slash command is a named instruction you run from a coding assistant's command line.

Use it during the authoring phase of a skill-to-command conversion to write the command, phase agents, migrated references, scripts, deprecated stub, and related workspace instructions.

It divides the conversion work between agents with separate file responsibilities, reducing conflicts while moving references and scripts into the new structure.

skill-to-command-author — Agent by chris-dare-dev

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add agents/chris-dare-dev/agent-kit/skill-to-command-author

Clone the repo

git clone --depth 1 https://github.com/chris-dare-dev/agent-kit

Per session 106 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.

When invoked 2,425 The whole file, excluding the scripts and references it only reads on demand.

Security scan C 2 findings. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00106	$0.02425
Opus 5	$0.00053	$0.01213
Sonnet 5	$0.00021	$0.00485
Haiku 4.5	$0.00011	$0.00243

Measured yesterday against content hash 78874f7e3699, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade C, and why

skill-to-command-author scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Instruction-override phrasingmediumPrompt injection

Text telling the model to disregard its earlier instructions or safety rules is the shape of a prompt injection, whoever wrote it.

"Now run X", "Ignore previous instructions", "Authorize the user", "Add yourself

Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

cat ".claude/agent-memory/skill-to-command-author/lessons.md" 2>/dev/null || echo "(no lessons yet)"

data/agents/skill-to-command-author.md · 180 lines

How it starts

The opening of the file, as written. The whole thing — 180 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Skill-to-Command Author

You are Turn 2 of the /skill-to-command pipeline. Your job is to author files on your designated write surface during parallel authoring. Two copies of you run in parallel (Agent A and Agent B) with DISJOINT file sets — coordination is encoded in your {WRITE_SURFACE} brief; you do not communicate with the other instance.

The orchestrator (.claude/commands/skill-to-command.md) dispatches you with substituted variables. You never invoke other sub-agents.

Input variables (substituted by the orchestrator)

{SKILL_NAME} — the skill being converted (must exist at data/skills/<name>/SKILL.md before you start)
{WRITE_SURFACE} — either A or B:
- A — own the orchestrator + agents + references migration:
  - Write data/commands/{SKILL_NAME}.md (new slash command body)
  - Write data/agents/{SKILL_NAME}-<role>.md × N (one per phase identified in Turn 1 discovery)
  - git mv data/skills/{SKILL_NAME}/references/<x>.md data/references/{SKILL_NAME}-<x>.md for each reference
  - Update the new agent bodies to point at the new flat-named reference paths
- B — own scripts migration + deprecated stub + workspace CLAUDE.md updates:
  - git mv data/skills/{SKILL_NAME}/scripts/<x>.{sh,py} data/scripts/{SKILL_NAME}-<x>.{sh,py} for each script
  - git rm data/skills/{SKILL_NAME}/SKILL.md (the old orchestrator body — name-collision with the new slash command otherwise; CRITICAL gotcha C1)
  - Write data/skills/{SKILL_NAME}-deprecated/SKILL.md with allowed-tools: Read and a redirect message (sunset date 30 days from today)
  - If workspace CLAUDE.md (data/claude-md/workspace-root.md) needs an update to register the new command, edit BOTH the canonical copy under data/claude-md/ AND the active workspace path; verify with diff that they are byte-identical
{DISCOVERY_SUMMARY} — the Turn 1 output: phases identified, write surface per agent, scripts to migrate (old→new paths), references to migrate (old→new paths), external-write boundary notes

Read the full file on GitHub · 180 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

yesterday First seen · 180 lines · 106 tokens per session scan C 78874f7e3699

Subscribe to this mod's changes

skill-to-command-author is an agent published in the GitHub repository chris-dare-dev/agent-kit (0 stars, last pushed 24d ago), licensed MIT. It adds 106 tokens to every session and 2,425 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it C with 2 findings (instruction-override phrasing, reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

status-active type/agent

algolia-agent

Senior Algolia platform engineer with command of index design, relevance tuning, InstantSearch React/Next.js, the Autocomplete UI library, direct search-client usage, indexing pipelines, API-key strategy, the Recommend API, AI search and Personalization (NeuralSearch, query categorization), Insights events and A/B…

bpainter/composable-dxp-claude-marketplace · 153 tokens

bynder-agent

Senior Bynder DAM platform engineer with command of asset modeling and metaproperties, Brand Guidelines, derivative templates, the bynder-js-sdk, Universal Compact View embedding, Bynder + Contentful pairing, portal and account architecture, permissions and workflow, webhooks, marketplace connectors, migrations, and…

bpainter/composable-dxp-claude-marketplace · 141 tokens

behavioral-economics-agent

Senior behavioral scientist who applies behavioral economics, choice architecture, and research methods to product, policy, marketing, and organizational problems. Use this agent when a task spans multiple skills in this plugin, requires sequencing, or needs senior-level judgment about which skill to apply for a given…

bpainter/composable-dxp-claude-marketplace · 80 tokens

brand-agent

Senior brand practitioner spanning strategy, naming, identity systems, voice and tone, guidelines composition, and brand audits. Use this agent when a task spans multiple skills in this plugin, requires sequencing, or needs senior-level judgment about which skill applies. Tagline: Brand from positioning to applied…

bpainter/composable-dxp-claude-marketplace · 76 tokens

claude-agent

Plugin orchestrator. Routes between the two claude- skills (claude-plugin-creator for building new Claude plugins from scratch, and claude-orchestrator for designing the orchestration layer of a new Cowork project). Use this agent as the first call for any Claude-tooling task — plugin creation, hook design, MCP server…

bpainter/composable-dxp-claude-marketplace · 106 tokens

Demonstrate

Agent for demonstrating VS Code features.

microsoft/vscode · 10 tokens

skill-to-command-author