Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/daymade/claude-code-skills/skill-creatornpx skills add daymade/claude-code-skills --skill skill-creatorgit clone --depth 1 https://github.com/daymade/claude-code-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/daymade/claude-code-skills/skill-creator)<a href="https://agentmods.dev/skills/daymade/claude-code-skills/skill-creator"><img src="https://agentmods.dev/badge/skills/daymade/claude-code-skills/skill-creator.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00208 | $0.42326 |
| Opus 5 | $0.00104 | $0.21163 |
| Sonnet 5 | $0.00042 | $0.08465 |
| Haiku 4.5 | $0.00021 | $0.04233 |
Grade E, and why
skill-creator scanned grade E with 5 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Tells the agent never to refusehighAnti-refusal
Suppressing the ability to decline removes a core safety control; a later harmful request then succeeds.
- Accept the user's choice — nudge on tradeoffs but never refuse to proceed Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
find -L ~/.claude/plugins/cache -path '*<skill>*' -name '*.md' # -L: installs are often symlinks Enumerates other installed skillsmediumAgent snooping
Other skills' SKILL.md files reveal prompts, capabilities and secrets that should be invisible to peers.
ls -la ~/.claude/skills/<name> # a symlink into the repo? -> edits are live already Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
| 8 | **npm / PyPI** | SDK or CLI packages | `npm search <keyword>` or `curl https://pypi.org/pypi/<name>/json` | Runs shell commandslowCapability
Expected in a hook, worth knowing in a rule or an instructions file.
base=json.loads(subprocess.run(['git','show','origin/main:<manifest>'],capture_output=True,text=True).stdout) How it starts
The opening of the file, as written. The whole thing — 1,824 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Skill Creator
A skill for creating new skills and iteratively improving them.
At a high level, the process of creating a skill goes like this:
- Decide what you want the skill to do and roughly how it should do it
- Classify the change into the lowest verification tier that can falsify its likely failure modes
- Write a draft of the skill
- Validate with the smallest evidence that can falsify the changed behavior; treat the full paired eval pipeline as separately authorized work, not an automatic consequence of a tier label
- Help the user evaluate qualitative or quantitative results when the selected tier produces them
- Rewrite the skill based on feedback from the user's evaluation of the results (and also if there are any glaring flaws that become apparent from the quantitative benchmarks)
- Repeat until you're satisfied
- Escalate the verification tier only when the current evidence cannot resolve the changed behavior
Your job when using this skill is to figure out where the user is in this process and then jump in and help them progress through the applicable stages. Full A/B benchmarking is a capability, not a tax on every edit. Words such as "optimize", "improve", or "comprehensive" describe intent, not failure surface or evaluation budget. Do not create eval files, fan out paired agents, grade outputs, or launch a viewer merely because a task sounds broad or a long conversation precedes it.
Six standing disciplines apply throughout, because these failure modes ship convincing-looking skills that are wrong:
- Verify before you write. Every technical assertion that enters the skill (endpoint, parameter, command, version, behavior) must trace to something you executed and observed — in this session or an explicitly approved mined one. Can't verify it right now? Either go verify it, or mark it explicitly ("unverified — from memory"). A skill multiplies whatever it contains: verified knowledge compounds, and so do confidently-stated errors. For knowledge skills (content is mostly facts about an external system — API endpoints, parameters, fields, platform behavior), read references/knowledge-skill-grounding.md for the operational version: the authority ladder (observed behavior > machine-readable contract > exercised production code > official docs > memory), evidence-scope annotation, pre-ship doc-example smoke runs, and the audience/Windows portability checklist. A source-grounding audit once found multiple confident contract claims that contradicted evidence already available to the author (methodology Case 9).
- Treat "impossible / not supported" as a hypothesis, not a conclusion. When a capability seems blocked (an API error wall, a tool that won't connect, a format that won't open), exhaust the observation paths — the UI's own network traffic, an alternative channel, a different documented identifier — before writing "the platform doesn't support this" into a skill. Observed behavior outranks speculative request shapes.
- Stand on the field's shoulders — retrieve the domain's established best-practices into context BY DEFAULT, before authoring or optimizing a skill's methodology. A skill's methodology is only as good as the knowledge in your context window, not the knowledge latent in your weights: pretraining is lossy, goes stale, and often is not even activated unless the canonical sources are actually pulled in. So the quality ceiling of what you write is
your training data + the user's input— unless you deliberately retrieve the subject domain's real prior art. Do it: WebSearch the field's canonical theory / standards / methods, and read any bundled or installed skill in that domain, then fold the load-bearing principles into the skill with attribution. This is a different axis from "Prior Art Research" below — that finds tools/infrastructure to reuse; this grounds the quality of the methodology itself in the discipline's accumulated science. Make it the default action, not something you wait to be asked for: briefly tell the user which field you're pulling from and let them say "skip," but never ship a methodology capped by your memory plus their prompt when 40 years of the field's public work is one search away. Examples: a data-visualization skill must absorb Cleveland & McGill's graphical-perception ranking and Bertin's visual variables (position/length beat color beat text — measured, not aesthetic); a date/time skill must surface the mature libraries and their canonical pitfalls; a persuasion/negotiation skill must retrieve the established frameworks rather than reinvent them from memory. If the canonical knowledge lives only in your weights and never enters context, you are guessing where you could be citing. - Preserve before you compress an existing skill. Updating an existing skill is a migration, not a blank-page rewrite. Before the first edit, capture the complete old bundle with the audit tool's
snapshotcommand, or reconstruct it from an explicit Git ref; an arbitrary copy plus a provenance label is not a baseline. Inventory runtime capabilities, trigger contexts, interfaces, references, and eval coverage. Progressive disclosure and concision authorize moving or deduplicating content; they do not authorize silently deleting behavior. After editing, runscripts/audit_skill_regression.pyand classify every unmatched old unit. A runtime contract that survives only inevals/, tests, or an unlinked reference is still lost. Do not call the update complete while any candidate is unclassified or any true gap remains unfixed. The same logic governs reversals, not just deletions, and covers any prior commitment — not only the ones carrying a date and a name: overturning a decision already made is a proposal, never a side effect. Say it out loud and get it accepted. A silent rewrite is worse than a silent deletion, because it destroys the artifact and the evidence that could have caught it in one move — and it blinds every downstream reviewer (see #5).
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- .gitignore 245 B
- agents/analyzer.md 10 KB
- agents/comparator.md 7.1 KB
- agents/grader.md 8.8 KB
- assets/eval_review.html 6.9 KB
- assets/supersede-kit/setup_supersede_hook.sh.template 9.6 KB
- assets/supersede-kit/supersede-routing-hook.sh.template 1.6 KB
- eval-viewer/generate_review.py 16 KB runs code
- eval-viewer/viewer.html 44 KB
- evals/evals.json 10 KB
- LICENSE.txt 11 KB
- pyproject.toml 279 B
- references/conversation_history_manifest.example.json 1.1 KB
- references/eval_pipeline_schemas.md 12 KB
- references/independent-review-protocol.md 13 KB
- references/knowledge-skill-grounding.md 9.2 KB
- references/prerequisites.md 4.3 KB
- references/reference_template.md 1.2 KB
- references/sanitization_checklist.md 11 KB
- references/skill-development-methodology.md 61 KB
- references/skill-precedence-and-coexistence.md 6.7 KB
- scripts/__init__.py 18 B runs code
- scripts/aggregate_benchmark.py 14 KB runs code
- scripts/audit_skill_regression.py 62 KB runs code
- scripts/check_references.py 12 KB runs code
- scripts/generate_report.py 13 KB runs code
- scripts/generate_supersede_kit.py 6.6 KB runs code
- scripts/improve_description.py 11 KB runs code
- scripts/init_skill.py 11 KB runs code
- scripts/mine_conversation.py 32 KB runs code
- scripts/package_skill.py 11 KB runs code
- scripts/packaging_policy.py 1.1 KB runs code
- scripts/quick_validate.py 21 KB runs code
- scripts/reference_net.sh 9.0 KB runs code
- scripts/run_eval.py 11 KB runs code
- scripts/run_loop.py 17 KB runs code
- scripts/security_scan.py 24 KB runs code
- scripts/selftest_validators.py 10 KB runs code
- scripts/setup_supersede_hook.sh 9.6 KB runs code
- scripts/supersede-routing-hook.sh 2.1 KB runs code
- scripts/utils.py 1.6 KB runs code
- tests/fixtures/mining-target/manifest.json 1.0 KB
- tests/fixtures/mining-target/references/examplehub_cli.md 331 B
- tests/fixtures/mining-target/SKILL.fixture.md 368 B
- tests/fixtures/mining-target/transcripts/claude_session.jsonl 842 B
- tests/fixtures/mining-target/transcripts/codex_history.jsonl 187 B
- tests/fixtures/mining-target/transcripts/history.jsonl 128 B
- tests/test_audit_skill_regression.py 43 KB runs code
- tests/test_mine_conversation.py 20 KB runs code
- tests/test_package_skill.py 8.8 KB runs code
- tests/test_reference_net.py 24 KB runs code
- tests/test_run_loop_degenerate_guard.py 10 KB runs code
- tests/test_security_scan.py 7.4 KB runs code
- tests/test_supersede_kit.py 8.7 KB runs code
- uv.lock 141 KB
- workflows/artifact-corpus-distillation/workflow.md 8.7 KB
- workflows/conversation-mining/architecture_contract.md 7.2 KB
- workflows/conversation-mining/patterns.md 7.8 KB
- workflows/conversation-mining/scripts/init_conversation_mining.py 9.1 KB runs code
- workflows/conversation-mining/workflow.md 11 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 1,824 lines · 208 tokens per session scan E 6b3817f881e2
skill-creator is a skill published in the GitHub repository daymade/claude-code-skills (1,375 stars, last pushed yesterday), licensed MIT. It adds 208 tokens to every session and 42,326 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it E with 5 findings (tells the agent never to refuse, reads agent configuration directories, enumerates other installed skills). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
brainstorming
You MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.
auto-perf-optimize
Run agent-driven VS Code performance or memory investigations. Use when asked to launch Code OSS, automate a VS Code scenario, run the Chat memory smoke runner, capture renderer heap snapshots, take workflow screenshots, compare run summaries, or drive a repeatable scenario before heap-snapshot analysis.
chat-perf
Run chat perf benchmarks and memory leak checks against the local dev build or any published VS Code version. Use when investigating chat rendering regressions, validating perf-sensitive changes to chat UI, or checking for memory leaks in the chat response pipeline.
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…