用 Codex 或 Claude 帮你安装 复制这段 Prompt,粘贴到 Codex、Claude 或其他助手里,让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt;运行前请先检查来源。
npx skills add https://github.com/JPeetz/agent-skills --skill skill-lifecycle-foundry命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地?可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
Design-first API development skill. Generates OpenAPI 3.1 specifications, enforces REST design best practices, validates endpoints, handles versioning, pagination, error formatting, authentication patterns, rate limiting, and idempotency. Activates when users say "design an API", "create OpenAPI spec", "API endpoint", "REST API design", "API contract", "Swagger/OpenAPI doc", "API versioning", "rate limiting", or "API security". Covers REST, GraphQL schema design, and gRPC proto generation with cross-protocol consistency.
AI-powered GraphQL API design, implementation, and optimization. Covers schema-first design, resolver architecture, query optimization with DataLoader for N+1 prevention, mutation patterns with idempotency, real-time subscriptions, Apollo Federation for distributed graphs, security hardening (depth limiting, rate limiting, authz), and production performance (persisted queries, caching, CDN integration). Primary keyword clusters: GraphQL schema design best practices, Apollo Federation subgraph patterns, DataLoader N+1 query optimization, GraphQL security depth limiting rate limiting, GraphQL persisted queries performance, GraphQL subscription real-time patterns, GraphQL error handling union types, GraphQL pagination relay cursor connection, GraphQL caching strategies production, GraphQL resolver architecture patterns. Designed for agentic platforms — Claude Code, Codex, Cursor, Gemini CLI, OpenClaw, GitHub Copilot, Windsurf, and OpenCode.
Use this skill when an agent needs to call a website's hidden or undocumented API: capture real browser requests into a HAR file, derive the exact request shape, build a clean replayable client, verify it outside the browser, and reuse the verified client. Activates when a backend has no documented API, or when you must reproduce the precise request (method, URL, headers, JSON body) of an action you can only perform in a browser. Authorized use only — never to bypass auth or bot detection.
| name | skill-lifecycle-foundry |
| description | Use when mining, authoring, and generalizing agent skills. |
| version | 1.0.0 |
| license | MIT |
| author | Skill Foundry |
| platforms | ["linux","macos"] |
| metadata | {"tags":["agent-skills","skill-authoring","skill-mining","skill-personalizing","skill-generalizing","progressive-disclosure","lifecycle"],"complexity_level":"intermediate","managed_workflows":["discovering_repeated_workflows","authoring_new_skill","personalizing_existing_skill","generalizing_for_release"]} |
The agent-skill lifecycle is a loop: you mine real usage for repeated workflows,
author those into SKILL.md files, personalize them to the local user's tools and
phrasing, generalizing them for public release, and keep them honest through a
validation gate. This is the meta-skill that governs that whole loop. It governs
the other skills in your inventory, not a single task — it tells you how to
discover, write, tune, and ship them safely.
It ships one small, optional executable — scripts/scan_sessions.py — a deterministic
first-pass miner for the mining step. It is stdlib-only and safe to run on any
archive; the rest of the skill is procedure and templates, because session layouts
vary too much for a bigger script to be trustworthy.
Use this skill when you want to:
SKILL.md from a spec, meeting notes, or a task the developer
already performs by hand.description and frontmatter.Don't use for: one-off tasks that are unlikely to recur (those are comments, not skills), writing a skill for a workflow you've never actually run, or any task where a single snippet suffices. If you wouldn't do it twice the same way, it isn't a skill.
skills/ convention; adapt to ~/.agents/skills/,
~/.claude/skills/, or .codex/skills/ as appropriate.Prerequisites, never here.You run this skill by naming the lifecycle operation you want, for example:
Mine my session history for repeated workflows that should become skills.
Audit this skill; tell me why it doesn't trigger when I say things naturally.
Generalize this private skill so I can publish it.
Because there is no single executable, the procedure below is the run: use the
terminal tool to find the archive trees, read_file sessions, and run the
validation gate on any skill you author or change.
| Operation | Action |
|---|---|
| Mine | python3 scripts/scan_sessions.py <archive> — count workflow-intent repeats |
| Draft | write_file <repo>/<slug>/SKILL.md with frontmatter + canonical body |
| Personalize | Rewrite examples/phrasing to the local user + tools |
| Generalize | Redact secrets, paths, and facts; make examples portable |
| Validate | scripts/validate_skill.py <skills-dir> → "valid": true |
| Release | Walk references/release-checklist.md |
Each step ends with a checkable completion criterion.
Scope the mine. Enumerate the session/archive sources (logs, transcripts, memory, repo history) that record repeated work. Completion: a named list of source paths to scan.
Run the repeat detector. Run python3 scripts/scan_sessions.py <archive_root>
in the terminal to count how often each intent keyword recurs across distinct
files. Pair the mechanical count with a close read: a keyword may appear often
yet be one trivial action.
Completion: a shortlist of candidate workflows, each with the session/offset
evidence where it repeats.
Rate each candidate. Mark each as personal (local-only), publishable (safe to generalize), or skip (too trivial or already covered). Completion: every candidate has a decision.
Draft the SKILL.md. Create <repo>/<slug>/SKILL.md (slug = lowercase-kebab
folder name). Write frontmatter (name matching the folder, description ≤60
chars ending in a period, version, license, author, platforms, a
metadata.tags block) and the canonical body sections.
Completion: frontmatter matches the folder, and the body has all canonical
sections.
Personalize where needed. If this is an existing or community skill, rewrite its examples and phrasing to the local user's tools, aliases, and paths — but keep secrets out and keep paths portable. Completion: the skill reads as the user, not a boilerplate.
Generalize for release. If publishing, sweep the skill for private paths,
hostnames, keys, names, quotes, and internal facts; neutralize or redact each.
Completion: a secret/pattern sweep of the file returns nothing outside
references/sources.md.
Document references. Add references/sources.md (one line per source +
URL) and push any domain-heavy content into dedicated reference docs so the
SKILL.md stays fair.
Completion: every reference is sourced and referenced from the body.
Package. Add LICENSE, CHANGELOG.md, and evals/evals.json next to it.
Completion: SKILL.md, LICENSE, CHANGELOG.md, evals/, references/ exist.
SKILL.md files that contain /Users/<you>/...
break on other machines. Keep paths repo-relative or ~-based.description says nothing about when to use it
is a skill that never learns. Keep the description crisp and pointing.name equals the folder slug; description is ≤60 characters and
ends in a period.LICENSE, CHANGELOG.md, evals/evals.json, and references/ sit beside
SKILL.md.sk-+24-char tokens, lin_api_, and absolute path patterns across
the released file returns nothing leaked.scripts/validate_skill.py <skills-dir> prints "valid": true with no issues.Run the gate. Execute scripts/validate_skill.py <skills-dir>; fix any
frontmatter or structure issue and re-run until "valid": true.
Completion: the validator reports valid and an empty issues list.
Release review. Walk the release checklist when the skill ships public. Completion: every checklist line is satisfied before publication.