write-agent-skill

A guide for creating and reviewing agent skills: reusable instructions that teach an AI agent how to handle a specific task.

In plain words
What is it for?
Writing, changing, testing, reviewing, splitting, or merging skills, including their descriptions, supporting files, and security checks.
Why use it?
It helps decide what belongs in a skill, how the skill should be triggered, and how to check it for unclear instructions or unsafe dependencies.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/daaaaave/agentic-workspace-core/write-agent-skill
Any agent
npx skills add Daaaaave/agentic-workspace-core --skill write-agent-skill
Clone the repo
git clone --depth 1 https://github.com/Daaaaave/agentic-workspace-core

Made for: Claude Code, Codex.

Per session 77 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,621 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00077 $0.03621
Opus 5 $0.00039 $0.01810
Sonnet 5 $0.00015 $0.00724
Haiku 4.5 $0.00008 $0.00362

Measured 3d ago against content hash 9e6618de9676, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

write-agent-skill scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

payload/.agents/skills/write-agent-skill/SKILL.md · 319 lines

How it starts

The opening of the file, as written. The whole thing — 319 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Write Agent Skill

Goal

Create small, portable, well-triggered skills that teach repeatable agent behavior without becoming hidden project documentation, unsafe dependencies, or broad always-on instructions.

Core Principle

A skill is operational text and should be treated like a lightweight dependency. Its description decides whether the agent loads it, and its body changes how the agent acts. Design skills from examples, trigger boundaries, resource decisions, safety review, and validation before writing prose.

Use When

  • The user asks to create, improve, split, merge, review, or validate a skill.
  • A repeated non-obvious workflow needs procedural guidance.
  • Skill trigger overlap or missing trigger coverage needs analysis.
  • A skill eval should be added or revised.
  • A behavior might belong in a skill, but could also belong in docs, a script, schema validation, or global agent instructions.
  • A skill needs source-backed design research; use research-to-knowledge first or alongside this skill.
  • A third-party or generated skill needs security, portability, or structure review before adoption.
  • Skill files, references, scripts, permissions, or dependencies need a supply-chain or prompt-injection audit.
  • A material skill update needs regression coverage for trigger behavior and output behavior.

Do Not Use When

  • The content is a durable project fact, decision, architecture note, runbook, or research result.
  • The behavior should apply to every task; use the repository entry instructions instead.
  • A deterministic script or schema can enforce the rule more reliably.
  • The task is a one-off request with no reusable workflow.
  • The user only needs external research, not skill authoring; use research-to-knowledge.
  • The task is only to install, run, or follow an existing skill without changing or auditing it.

Operating Modes

Mode Trigger Output
Classify Unsure whether behavior belongs in a skill. Destination: skill, docs, script/schema/test, handoff, entry instruction, or no artifact.
Create New reusable procedural capability is justified. Skill directory with SKILL.md plus eval.
Update Existing skill behavior, trigger boundary, or resources must change. Small patch plus updated evals covering behavior delta.
Boundary Skill triggers too often, not often enough, or overlaps another skill. Frontmatter/body/eval changes that protect routing.
Split/Merge Skill size or overlap may justify restructuring. Keep, split, merge, or delete recommendation with boundary evidence.
Secure Skill, script, reference, dependency, or copied upstream package may be unsafe. Security findings and patch or rejection.
Evaluate Skill needs regression checks. Should-trigger, should-not-trigger, edge-case eval prompts and validation results.

Read the full file on GitHub · 319 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 319 lines · 77 tokens per session scan A 9e6618de9676

Subscribe to this mod's changes

write-agent-skill is a skill published in the GitHub repository Daaaaave/agentic-workspace-core (6 stars, last pushed 2mo ago), licensed MIT. It adds 77 tokens to every session and 3,621 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.