What is meta-skill-builder?

A guided workflow for creating new coding-agent skills. It takes a skill from requirements and research through design, drafting, testing, validation, and review.

Use it to define triggers, choose an agent pattern, draft a SKILL.md file, create test prompts, and check the finished skill against a quality rubric.

It reduces the guesswork and uneven quality that can result from writing each skill from scratch.

meta-skill-builder — Skill for Claude Code by modu-ai/moai-cowork

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add modu-ai/moai-cowork --skill meta-skill-builder

Clone the repo

git clone --depth 1 https://github.com/modu-ai/moai-cowork

Made for: Claude Code.

Or install moai-coworker, the plugin that ships this one along with the rest of its 32 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/modu-ai/moai-cowork/meta-skill-builder/github.svg)](https://agentmods.dev/skills/modu-ai/moai-cowork/meta-skill-builder)

Your own site

<a href="https://agentmods.dev/skills/modu-ai/moai-cowork/meta-skill-builder"><img src="https://agentmods.dev/badge/skills/modu-ai/moai-cowork/meta-skill-builder/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/modu-ai/moai-cowork/meta-skill-builder"><img src="https://agentmods.dev/badge/skills/modu-ai/moai-cowork/meta-skill-builder.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 141 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 4,100 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 3 findings, up to medium

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

medium Agent Snooping · line 147
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
medium Agent Snooping · line 196
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.
medium Agent Snooping · line 148
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.

Fix: Remove all code or instructions that list or read other skills' files or directories. Skills should operate independently; cross-skill access is a privilege escalation.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00141	$0.04100
Opus 5.5	$0.00056	$0.01640
Sonnet 5.5	$0.00028	$0.00820
Haiku 4.5	$0.00014	$0.00410

Measured 19d ago against content hash 3243576dd435, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

meta-skill-builder scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 19d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/moai-coworker/skills/meta-skill-builder/SKILL.md · 280 lines

How it starts

The opening of the file, as written. The whole thing — 280 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Skill Builder — 6-Phase 스킬 생성 워크플로우

moai-coworker | revfactory/harness 방법론 기반 스킬 생성

개요

harness 오픈소스의 6-Phase 스킬 생성 워크플로우를 모두의 코워크 컨텍스트에 맞게 변환한 스킬입니다. 수작업 스킬 작성의 품질 편차를 줄이고, 체계적인 생성 프로세스를 통해 일관된 품질의 스킬을 생산합니다.

이름 이력: v1.3.x까지 skill-forge로 제공되던 스킬이 v1.5.x에서 meta-skill-builder로 이름 변경되었습니다. 별칭은 유지되지 않으며 모든 참조는 meta-skill-builder로 갱신해야 합니다.

트리거 키워드

스킬 생성 스킬 제작 meta-skill-builder 새 스킬 만들기 스킬 추가 신규 스킬 harness 워크플로우

워크플로우

Phase 1: Requirements   → 사용자 의도 분석, 트리거 키워드 정의
Phase 1.5: Research     → 공식 자료·베스트 프랙티스 외부 조사 (현재 앱의 검색 기능, 관련 공식 문서 우선)
Phase 2: Architecture   → 에이전트 패턴 선택 (6종 중 매핑)
Phase 3: Skill Draft    → meta-skill-template 기반 SKILL.md 초안 + ## 출처 섹션
Phase 4: Test Gen       → 테스트 프롬프트 2-3개 + 기대 출력 정의
Phase 5: Validation     → 4차원 루브릭 스코어링 (meta-skill-tester 본문 §스코어링 루브릭)
Phase 6: Review         → 품질 게이트 통과 확인, 파일 배치

실행 규칙

Phase 1: Requirements (요구사항 분석)

사용자의 자연어 요청에서 스킬 요구사항을 추출합니다.

필수 수집 항목:

항목	질문	예시
목적	"이 스킬이 해결할 문제는?"	"영업 제안서를 자동 생성하고 싶다"
타겟 플러그인	"어느 플러그인에 배치할까?"	moai-coworker
입력	"사용자가 무엇을 입력하나?"	회사명, 타겟 산업, 제품 정보
출력	"어떤 산출물을 기대하나?"	제안서 DOCX 파일
복잡도	"스킬이 얼마나 복잡한가?"	Standard (50-150줄)

출력물: 요구사항 요약. 확인이 필요한 항목은 현재 앱의 질문 기능 또는 대화로 묻고, 질문 기능이 없는 하위 실행은 누락 항목을 상위에 반환합니다.

Phase 1.5: Research (외부 자료 조사) ★ v1.6.0 신설

스킬 도메인의 공식 자료·표준 양식·베스트 프랙티스를 조사하여 SKILL.md의 정확성과 권위를 확보합니다.

조사 트리거 (다음 중 하나라도 해당하면 Phase 1.5 의무):

한국 법규·표준 양식 관련 (세무·노무·계약·채용·의료 등)
외부 라이브러리·SDK·API·CLI 활용
글로벌 베스트 프랙티스 인용이 필요한 도메인 (B2B SaaS·HR·BI·DevOps 등)
정량 수치·통계 데이터·시장 규모 인용

조사 절차:

현재 앱에서 사용 가능한 검색·문서 열람 기능으로 조사
- 한국어 쿼리 1-2회: "<도메인> <핵심 키워드> <연도>" 형식 (예: "한국 채용절차법 NCS 2026")
- 영어 쿼리 1-2회 (글로벌 베스트 프랙티스 인용 시): "<topic> best practice <year>" 형식
- 검색 결과의 최신성 확인 (2년 이내 자료 우선)
라이브러리·SDK·CLI 관련 스킬일 때
- 공식 문서와 릴리스 노트에서 현재 API·CLI와 폐기된 기능을 확인
- Context7 MCP가 연결된 경우에는 보조 자료로 활용하고 원저작자 문서와 대조
도메인별 공식 출처 화이트리스트 (우선 인용):

Read the full file on GitHub · 280 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

19d ago Changed · +1 lines 3243576dd435
1mo ago Changed · +5 lines · -16 tokens per session 0862884f7d4b
1mo ago First seen · 274 lines · 157 tokens per session scan A f94b75560cab

Subscribe to this mod's changes

meta-skill-builder is a skill published in the GitHub repository modu-ai/moai-cowork (311 stars, last pushed 17d ago), licensed Apache-2.0. It adds 141 tokens to every session and 4,100 once invoked, about $0.0006 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Building agents Claude Code Planning ai-agents anthropic claude-plugins marketplace plugin-marketplace

market-intelligence-report

Produce a Market Intelligence Report — YouTube competitive research, channel analysis, content gap discovery, idea generation, daily scanning, and AI trend scouting — then render it as a BenAI-branded HTML dashboard in the instant-ui design language. Use this skill whenever the user says "market intelligence report"…

naveedharri/benai-skills · 193 tokens

linkedin-writer-vault

Vault-aware LinkedIn writer. Same step-by-step LinkedIn post process as linkedin-writer, but ICP, voice, and offer context come from the vault's Context/ folder instead of being bundled inside the skill. Update one file in the vault and every skill pointing to it inherits the change. TRIGGERS: LinkedIn post, LinkedIn…

naveedharri/benai-skills · 153 tokens

operator

Build and schedule a personalized Operator prompt that runs a Baalda vault as a second brain on a recurring cadence. Run it from inside the vault: it reads Context/ and CLAUDE.md first to infer org, team, brand voice and paths, then asks only the gaps (cadence, connectors, DM recipient, budgets, signature), writes the…

naveedharri/benai-skills · 156 tokens

crm-prospect-mining

Mine high-value prospects from CRM pipeline stages (Lost, No Show, Churned, Stalled) by cross-referencing records with LinkedIn company data and comms history. Connects to any CRM, pulls records from target stages, filters out personal email domains, finds company LinkedIn pages via web research, bulk-scrapes company…

naveedharri/benai-skills · 222 tokens

phpunit-migration-test-reviewing

Internal sub-skill. Do not auto-activate. Use only when explicitly invoked by name by another skill or agent.

shopwareLabs/ai-coding-tools · 32 tokens

phpunit-unit-test-reviewing