agentmods.dev

meta-skill-builder

meta-skill-builder is a skill for Claude Code from modu-ai/moai-cowork. It costs 157 tokens per session (3,860 once invoked), scanned A, original, Apache-2.0.

A guided workflow for creating new coding-agent skills. It takes a skill from requirements and research through design, drafting, testing, validation, and review.

In plain words
What is it for?
Use it to define triggers, choose an agent pattern, draft a SKILL.md file, create test prompts, and check the finished skill against a quality rubric.
Why use it?
It reduces the guesswork and uneven quality that can result from writing each skill from scratch.

Skill for Claude Code

Written for Claude Code: user-invocable in frontmatter. Also seen: names the AskUserQuestion tool.

Part of the moai-coworker plugin — 32 skills shipped together

not rated 300repo 7d ago A scan SkillSpector: warn 157 tokens original Apache-2.0

Good fit Use it to define triggers, choose an agent pattern, draft a SKILL.md file, create test prompts, and check the finished skill against a quality rubric.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/modu-ai/moai-cowork/meta-skill-builder
View source ↗ modu-ai/moai-cowork cowork.mo.ai.kr
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add modu-ai/moai-cowork --skill meta-skill-builder
Clone the repo
git clone --depth 1 https://github.com/modu-ai/moai-cowork

Made for: Claude Code.

Or install moai-coworker, the plugin that ships this one along with the rest of its 32 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for meta-skill-builder

README.md
[![agentmods](https://agentmods.dev/badge/skills/modu-ai/moai-cowork/meta-skill-builder/github.svg)](https://agentmods.dev/skills/modu-ai/moai-cowork/meta-skill-builder)
Your own site
<a href="https://agentmods.dev/skills/modu-ai/moai-cowork/meta-skill-builder"><img src="https://agentmods.dev/badge/skills/modu-ai/moai-cowork/meta-skill-builder/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for meta-skill-builder

Your own site · 80×15
<a href="https://agentmods.dev/skills/modu-ai/moai-cowork/meta-skill-builder"><img src="https://agentmods.dev/badge/skills/modu-ai/moai-cowork/meta-skill-builder.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 157 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,860 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 3 findings, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • medium Agent Snooping · line 147
    Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
    Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
  • medium Agent Snooping · line 196
    Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
    Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
  • medium Agent Snooping · line 148
    Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
    Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00157 $0.03860
Opus 5 $0.00078 $0.01930
Sonnet 5 $0.00031 $0.00772
Haiku 4.5 $0.00016 $0.00386

Measured 7d ago against content hash f94b75560cab, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

meta-skill-builder scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/moai-coworker/skills/meta-skill-builder/SKILL.md · 274 lines

How it starts

The opening of the file, as written. The whole thing — 274 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Skill Builder — 6-Phase 스킬 생성 워크플로우

moai-coworker | revfactory/harness 방법론 기반 스킬 생성

개요

harness 오픈소스의 6-Phase 스킬 생성 워크플로우를 모두의 코워크 컨텍스트에 맞게 변환한 스킬입니다. 수작업 스킬 작성의 품질 편차를 줄이고, 체계적인 생성 프로세스를 통해 일관된 품질의 스킬을 생산합니다.

이름 이력: v1.3.x까지 skill-forge로 제공되던 스킬이 v1.5.x에서 meta-skill-builder로 이름 변경되었습니다. 별칭은 유지되지 않으며 모든 참조는 meta-skill-builder로 갱신해야 합니다.

트리거 키워드

스킬 생성 스킬 제작 meta-skill-builder 새 스킬 만들기 스킬 추가 신규 스킬 harness 워크플로우

워크플로우

Phase 1: Requirements   → 사용자 의도 분석, 트리거 키워드 정의
Phase 1.5: Research     → 공식 자료·베스트 프랙티스 외부 조사 (WebSearch + Context7)  ★ v1.6.0
Phase 2: Architecture   → 에이전트 패턴 선택 (6종 중 매핑)
Phase 3: Skill Draft    → meta-skill-template 기반 SKILL.md 초안 + ## 출처 섹션
Phase 4: Test Gen       → 테스트 프롬프트 2-3개 + 기대 출력 정의
Phase 5: Validation     → 4차원 루브릭 스코어링 (meta-skill-tester 본문 §스코어링 루브릭)
Phase 6: Review         → 품질 게이트 통과 확인, 파일 배치

실행 규칙

Phase 1: Requirements (요구사항 분석)

사용자의 자연어 요청에서 스킬 요구사항을 추출합니다.

필수 수집 항목:

항목 질문 예시
목적 "이 스킬이 해결할 문제는?" "영업 제안서를 자동 생성하고 싶다"
타겟 플러그인 "어느 플러그인에 배치할까?" moai-coworker
입력 "사용자가 무엇을 입력하나?" 회사명, 타겟 산업, 제품 정보
출력 "어떤 산출물을 기대하나?" 제안서 DOCX 파일
복잡도 "스킬이 얼마나 복잡한가?" Standard (50-150줄)

출력물: 요구사항 문서 (인메모리, AskUserQuestion으로 확인)

Phase 1.5: Research (외부 자료 조사) ★ v1.6.0 신설

스킬 도메인의 공식 자료·표준 양식·베스트 프랙티스를 조사하여 SKILL.md의 정확성과 권위를 확보합니다.

조사 트리거 (다음 중 하나라도 해당하면 Phase 1.5 의무):

  • 한국 법규·표준 양식 관련 (세무·노무·계약·채용·의료 등)
  • 외부 라이브러리·SDK·API·CLI 활용
  • 글로벌 베스트 프랙티스 인용이 필요한 도메인 (B2B SaaS·HR·BI·DevOps 등)
  • 정량 수치·통계 데이터·시장 규모 인용

조사 절차:

  1. WebSearch 2-4회 (병렬 권장)

    • 한국어 쿼리 1-2회: "<도메인> <핵심 키워드> <연도>" 형식 (예: "한국 채용절차법 NCS 2026")
    • 영어 쿼리 1-2회 (글로벌 베스트 프랙티스 인용 시): "<topic> best practice <year>" 형식
    • 검색 결과의 최신성 확인 (2년 이내 자료 우선)

  2. Context7 MCP (라이브러리·SDK·CLI 관련 스킬일 때)

    • resolve-library-id → get-library-docs 순서
    • 최신 API/CLI 변경사항·deprecation 확인
    • 학습 데이터 cutoff 보완

  3. 도메인별 공식 출처 화이트리스트 (우선 인용):

    도메인 1차 권장 출처
    한국 세무·재무 국세청 nts.go.kr, 홈택스 hometax.go.kr, DART dart.fss.or.kr
    한국 노무·채용 고용노동부 moel.go.kr, NCS ncs.go.kr, 한국노동연구원 kli.re.kr
    한국 의료·건강 식약처 mfds.go.kr, 보건복지부 mohw.go.kr, 건강보험공단 nhis.or.kr
    한국 정부지원 K-Startup k-startup.go.kr, BIZINFO bizinfo.go.kr
    한국 통계·시장 KOSIS kosis.kr, 한국은행 ECOS ecos.bok.or.kr
    한국 법률 국가법령정보센터 law.go.kr, 대법원 종합법률정보 glaw.scourt.go.kr
    글로벌 회계 표준 K-IFRS, IFRS Foundation ifrs.org
    글로벌 채용 규제 EEOC eeoc.gov, NYC Local Law 144, ISO 42001:2023
    글로벌 SaaS BP 제품 공식 문서(HubSpot·Salesforce·Greenhouse 등) + 업계 리딩 블로그

Read the full file on GitHub · 274 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 7d ago First seen · 274 lines · 157 tokens per session scan A f94b75560cab

Subscribe to this mod's changes

meta-skill-builder is a skill published in the GitHub repository modu-ai/moai-cowork (300 stars, last pushed 7d ago), licensed Apache-2.0. It adds 157 tokens to every session and 3,860 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Building agentsClaude CodePlanningai-agentsanthropicclaude-pluginsmarketplaceplugin-marketplace
Related

Other skills, from other repositories

market-intelligence-report

Produce a Market Intelligence Report — YouTube competitive research, channel analysis, content gap discovery, idea generation, daily scanning, and AI trend scouting — then render it as a BenAI-branded HTML dashboard in the instant-ui design language. Use this skill whenever the user says "market intelligence report"…

naveedharri/benai-skills · 193 tokens

linkedin-writer-vault

Vault-aware LinkedIn writer. Same step-by-step LinkedIn post process as linkedin-writer, but ICP, voice, and offer context come from the vault's Context/ folder instead of being bundled inside the skill. Update one file in the vault and every skill pointing to it inherits the change. TRIGGERS: LinkedIn post, LinkedIn…

naveedharri/benai-skills · 153 tokens

marketing-os-carousel

Build an image-first social carousel from an asset already filed in the Marketing OS, export it as a PDF, and record it back as a real channel asset. Brand palette, typography, the logo pointer and the never-black-background rule all resolve from Context/brand/brand-kit.md. Source is a filed newsletter edition…

naveedharri/benai-skills · 221 tokens

operator

Build and schedule a personalized Operator prompt that runs a Baalda vault as a second brain on a recurring cadence. Run it from inside the vault: it reads Context/ and CLAUDE.md first to infer org, team, brand voice and paths, then asks only the gaps (cadence, connectors, DM recipient, budgets, signature), writes the…

naveedharri/benai-skills · 156 tokens

crm-prospect-mining

Mine high-value prospects from CRM pipeline stages (Lost, No Show, Churned, Stalled) by cross-referencing records with LinkedIn company data and comms history. Connects to any CRM, pulls records from target stages, filters out personal email domains, finds company LinkedIn pages via web research, bulk-scrapes company…

naveedharri/benai-skills · 222 tokens

seo-hreflang

Hreflang and international SEO audit, validation, and generation. Detects common mistakes, validates language/region codes, and generates correct hreflang implementations for HTML, HTTP headers, and XML sitemaps. Use when user says "hreflang", "i18n SEO", "international SEO", "multi-language", "multi-region"…

naveedharri/benai-skills · 88 tokens