一键导入
write-a-skill
Scaffold a new SKILL.md following the exact format contract, update all three registry files, and validate evidence and format compliance in one shot.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
菜单
Scaffold a new SKILL.md following the exact format contract, update all three registry files, and validate evidence and format compliance in one shot.
用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | write-a-skill |
| description | Scaffold a new SKILL.md following the exact format contract, update all three registry files, and validate evidence and format compliance in one shot. |
Related: /skills-doctor diagnoses broken skills; /reflect identifies gaps a new skill could fill; /session-handoff if skill creation spans multiple sessions.
Do not use this skill for editing an existing skill's content (normal edit, not a scaffold). Do not use for non-SKILL markdown files like README or CONTRIBUTING.
land-and-deploy), noun-first for review skills (pr-review). Match existing naming patterns.Verify necessity
.cursor/skills.json for duplicate names with grep '"name"' .cursor/skills.json.skills/productivity/, skills/engineering/, skills/planning/ for same-name directories.Collect requirements
my-new-skill).productivity, engineering, or planning.quality, testing, workflow, context, dx, safety, debugging, operations, documentation).Scaffold directory
mkdir -p skills/<domain>/<skill-name>/skills/<domain>/<skill-name>/resources/ and reference them in Process steps by relative path.Draft the 8 mandatory sections in exact order:
name and description (use >- for multi-line descriptions).## When To Use — bullet list of trigger conditions, then Related: line with backtick-wrapped /skill-name references, then Do not use this skill for... line specifying the alternative skill.## Core Stance — 3–5 principles, declarative and opinionated. Staff-engineer tone: critical, precise, pragmatic. No assistant/servant language.## Research Backing — bulleted list. Each entry: **Author (Institution, Year)**, *Title.* Key finding. Minimum 2 for engineering, 1 for productivity/planning.## Process — numbered steps 1–N. Each step has a concrete command, file path, or tool invocation.## Operating Rules — bulleted constraints. Use "Do not..." and "Prefer..." imperatives. No vague "be careful."## Output Format — begins: Return a markdown report with these exact sections: followed by a bullet list of section names. Never "varies."## Example — concrete, realistic snippets from each major output section. Real-looking file paths and values.Validate evidence
[VERIFY CITATION] rather than inventing.Update registries (three files)
.cursor/skills.json: add entry with name, description, file (full path from repo root), tags.src/skills/manifest.ts: verify auto-derivation from skills.json picks up the new entry. If the manifest uses LIBRARY_SKILLS or equivalent data source, confirm the path is in the correct array. Add manually only if the source of truth is not skills.json.README.md: add a row to the appropriate inventory table (Engineering, Planning, Productivity) with columns matching the existing format.Validate format compliance
cat skills/<domain>/<skill-name>/SKILL.md | head -1 to verify YAML frontmatter starts with ---.grep -c "^## " skills/<domain>/<skill-name>/SKILL.md to verify 7 level-2 headings (When To Use, Core Stance, Research Backing, Process, Operating Rules, Output Format, Example).Report
[VERIFY CITATION] — never invent.>- for multi-line, keeping the first line punchy.skills/<domain>/<name>/SKILL.md.Return a markdown report with these exact sections:
skills/productivity/my-new-skill/
| Section | Status |
|---|---|
| YAML frontmatter | OK |
| When To Use | OK |
| Core Stance | OK |
| Research Backing | OK |
| Process | OK |
| Operating Rules | OK |
| Output Format | OK |
| Example | OK |
.cursor/skills.json added:
{
"name": "my-new-skill",
"description": "Brief one-sentence description of what this skill does.",
"file": "skills/productivity/my-new-skill/SKILL.md",
"tags": ["productivity", "workflow"]
}
| Item | Status |
|---|---|
| YAML frontmatter (name + description) | PASS |
| When To Use with "Do not use" line | PASS |
| Related cross-references (≥1) | PASS |
| Research Backing (≥1 real citation) | PASS |
| Numbered Process with concrete steps | PASS |
| Specific Operating Rules | PASS |
| Rigid Output Format | PASS |
| Example with concrete content | PASS |
| Registry updates (3 files) | PASS |
Suggested commit message:
feat(skills): add <name> skill
<one-line summary>
Co-authored-by: CommandCodeBot <noreply@commandcode.ai>
Code review and cleanup across reuse, quality, and efficiency dimensions. Launches three parallel review agents against the current diff, then aggregates findings and applies fixes.
Red-team the agent's own output against OWASP Top 10 for LLM Applications and Agentic AI. Self-inject, test boundaries, check exfiltration paths. If you can't attack your own output, someone else will.
Mandatory verification of every factual claim before emission. API contracts, dependency versions, file existence, behavior promises — claims about code are hypotheses until verified against the actual source. Based on Dhuliawala et al. (Meta FAIR, ACL 2024).
Disciplined 6-step diagnosis loop with strict evidence gates between stages. Reproduce → minimise → hypothesise → instrument → fix → regression-test. Cannot advance without the required artifact per step.
Split the workflow into Evaluator and Optimizer personas. Evaluator scores output 1–10 on correctness, completeness, safety, and simplicity. Optimizer rewrites to address critiques. Loop until score ≥9 or 3 iterations. Self-improvement without measurement is guessing.
Detect fail-open security patterns: debug mode in production, permissive CORS, disabled CSRF, default admin credentials, verbose error messages, unauthenticated health endpoints. Configuration is code — review it with the same rigor.