Token导航 LogoToken导航

Agent Skill · 前端设计

skill-creator(技能创建器)

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

skill-creator 是前端设计类 Agent Skill,可用宿主为 Codex、Claude、Cursor、Gemini CLI,通过GitHub 仓库获取,权限为需要联网;许可证为 MIT,第三方扫描已通过,按安装量在前端设计类的 10,216 个 Skill 里排第 390。

总安装 28,168周安装 848GitHub Stars 440下载 10,872核验 2026-05-01

安装说明

本站只整理中文说明,不托管安装包,也不代用户安装。
GitHub
许可证
MIT

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:skill-creator(技能创建器)
来源仓库:https://github.com/hoangnguyen0403/agent-skills-standard
仓库路径:skills/skill-creator
安装命令:
npx skills add https://github.com/hoangnguyen0403/agent-skills-standard --skill 'Skill Creator'
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。不同来源提供的安装方式可能略有差异;本站展示可直接复制的安装命令,安装前请核对来源页面。

skills.shnpx skills
npx skills add https://github.com/hoangnguyen0403/agent-skills-standard --skill 'Skill Creator'

这个 Skill 是做什么的

前端设计类 Skill 关注页面结构、视觉规范和组件写法,输出通常是可运行的界面代码。

辅助安全审计、权限检查、凭据风险和认证流程排查。适合梳理敏感配置、检查依赖风险或分析鉴权逻辑。不能将工具输出直接当作最终结论,需人工复核。适用宿主包括 Codex、Claude、Cursor、Gemini CLI,接入前应确认版本、权限和运行环境要求。涉及密钥、令牌或生产系统时,应先确认最小权限和操作边界。

skill-creator 属于前端设计类 Skill,可作为该场景下的辅助能力补充。

来源仓库内路径:skills/skill-creator

上手步骤

4 步
  1. 1

    确认自己的宿主工具

    公开资料标注支持 Codex、Claude、Cursor、Gemini CLI;先确认自己用的是其中之一,再按对应工具的 Skills 目录放置。

  2. 2

    拿到安装命令

    可以直接复制的命令是 npx skills add https://github.com/hoangnguyen0403/agent-skills-standard --skill…;命令里的占位符换成自己的路径或密钥再执行。

  3. 3

    安装后重启宿主

    命令执行完要完全退出宿主工具再打开,让新装的 Skill 被重新扫描到,否则列表里可能看不到。

  4. 4

    按最小权限试用

    它需要需要联网,先在测试目录或测试账号里跑,确认没问题再放到正式项目。

常见问题

6 条

skill-creator 怎么安装?

在终端执行 npx skills add https://github.com/hoangnguyen0403/agent-skills-standard --skill 'Skill Cre…。装完完全退出宿主工具再打开,让它重新扫描本地 Skill。

skill-creator 支持哪些 AI 工具?

公开资料标注支持 Codex、Claude、Cursor、Gemini CLI。其他工具只要能读取本地 Skill 目录,一般也能手动放进去,但要自己确认触发方式是否一致。

skill-creator 需要什么权限?

权限级别是需要联网。该 Skill 可能需要联网访问来源站点、仓库或外部 API;具体网络访问范围需要结合源码和 README 复核。

skill-creator 是免费的吗?

来源标注的许可证是 MIT。本站不代收任何费用,也不托管安装包;能否商用、要不要署名,以许可证原文为准。

skill-creator 用的人多吗?

公开数据是累计安装 28,168 次,近一周安装 848 次,下载 10,872 次,GitHub 440 星。这些数字来自第三方目录统计,只能当作热度参考,不代表质量或安全性。

skill-creator 安全吗?

第三方扫描结果为通过,但这只覆盖已知的静态检查项,不能替代自己读一遍源码和安装命令。

值得选的地方和要先想清楚的地方

值得选的地方

  • 同时适配 4 种工具,换客户端不用重新找替代品。
  • 3 个目录同时收录,说明这个 Skill 流传比较广。
  • 许可证明确为 MIT,商用和分发边界好判断。
  • 第三方扫描已通过,常见的高风险行为没有命中。

先想清楚的地方

  • 第三方目录整理,版本更新和行为细节以来源仓库为准。

适不适合你

更适合

  • 已经在用 Codex,想直接扩展它能力的人。
  • 需要处理前端设计类任务、又不想每次都手写提示词的人。
  • 需要许可证清楚、并且有第三方扫描结果的团队项目。

不太适合

  • 需要厂商级技术支持和 SLA 的生产系统。

前端设计类 Skill 对比

6 个同类
Skill总安装GitHub 星权限许可证扫描
frontend-design

前端设计 · Codex、Claude

8,823,360126,072只读MIT通过
vercel-composition-patterns

Vercel 组合模式 · Codex、Claude

3,858,81625,893需要联网MIT通过
vercel-react-native-skills

Vercel React native skills 前端 · Codex、Claude

2,468,66425,878只读MIT通过
adapt

adapt 搜索 · Codex、Claude

2,027,04023,125操作浏览器未明确通过
bolder

bolder 分析 · Codex、Claude

2,004,28823,130只读未明确通过
skill-creator

技能创建器 · 本页

28,168440需要联网MIT通过

按安装量取同分类前几名;数字来自第三方目录统计,只作热度参考,不代表质量结论。

SKILL.md 原文

Agent Skill Creator Standard

Priority: P0 (CRITICAL)

Strict guidelines for authoring High-Density Agent Skills. Maximize information density while minimizing token consumption through progressive disclosure and strategic content organization.

Core Principles

Token Economy First ⚡

Every word costs tokens. Design skills for maximum information/token ratio:

  • Progressive Loading: Load only essential content initially
  • Lazy References: Move detailed examples to references/ folder
  • Imperative Compression: Use verbs, abbreviations, bullet points
  • Context Window Awareness: Design for 4k-32k token limits across agents

Three-Level Loading System

Level 1: Metadata (100 words) → Always loaded
Level 2: SKILL.md Body (100 lines) → When triggered
Level 3: References/Scripts/Assets → As needed

Directory Structure

skills/
└── {category}/                     # e.g., "flutter" (lowercase)
    └── {skill-name}/               # e.g., "bloc-state-management" (kebab-case)
        ├── SKILL.md                # Core Logic (High Density, <100 lines)
        ├── scripts/                # Executable code (Deterministic tasks)
        │   └── automation.py
        ├── references/             # Heavy Examples (Lazy loaded)
        │   ├── patterns.md
        │   └── examples.md
        └── assets/                 # Output templates (Never loaded)
            └── template.json

Writing Rules (Token-Optimized)

  1. Imperative Compression: Start with verbs. No "Please/You should".

- *Waste*: "You should use BLoC for state management." (8 words) - *Efficient*: "Use BLoC for state management." (5 words)

  1. Token Economy: Maximize info/token ratio.

- Skip articles ("the", "a") if readable - Use standard abbreviations (cfg, param, impl) - Bullet points > paragraphs (3x density)

  1. Progressive Disclosure: Essential info first, details on-demand.

- Core workflow in SKILL.md - Complex examples in references/ - Templates/assets never loaded

  1. Context-Aware Design: Different agents have different limits.

- Cursor: ~100k tokens - Claude: ~200k tokens - Windsurf: ~32k tokens

Content Sections (Token-Budgeted)

Required sections in SKILL.md:

  1. Frontmatter (Mandatory): Metadata for triggering (100 words max) --- name: Skill Name description: What it does + when to use it (triggers activation) metadata: labels: [tag1, tag2] triggers: files: ['**/*.ext'] keywords: [term1, term2] ---
  2. Priority: P0 (Critical), P1 (Standard), or P2 (Optional)
  3. Structure: ASCII tree of expected file layout
  4. Guidelines: Bullet points of "Do this" (imperative)
  5. Anti-Patterns: Bullet points of "Don't do this"
  6. Reference Links: Links to references/ files (lazy loading)

Size Limits (Strict)

ElementLimitAction if Exceeded
SKILL.md total100 linesExtract to references/
Inline code block10 linesMove to references/
Anti-pattern item15 wordsCompress to imperative
Description after Priority0 linesRemove (use frontmatter)
Tables8 rowsExtract to references/
Explanatory sections10 linesExtract to references/

Resource Organization (Token-Saving)

scripts/ - Executable Code

When to use: Deterministic, repeated tasks Benefits: Never loaded into context, executed directly Examples: Code generators, formatters, validators

references/ - Documentation

When to use: Detailed examples, API docs, complex patterns Benefits: Loaded only when needed, keeps SKILL.md lean Examples: Implementation patterns, error handling guides

assets/ - Output Templates

When to use: Boilerplate files, images, configs Benefits: Never loaded, copied to output as-needed Examples: Project templates, config files, icons

Skill Creation Lifecycle

Phase 1: Understanding (Token Audit)

  1. Define concrete use cases
  2. Identify repetitive patterns
  3. Calculate token budget per agent

Phase 2: Planning (Resource Strategy)

  1. Core workflow → SKILL.md
  2. Complex examples → references/
  3. Repeated code → scripts/
  4. Templates → assets/

Phase 3: Implementation (Compression)

  1. Write imperative guidelines
  2. Compress examples to essentials
  3. Test context window fit

Phase 4: Validation (Token Testing)

  1. Verify loading efficiency
  2. Test across different agents
  3. Measure token consumption

Validation Checklist

Before finalizing, verify:

  • SKILL.md ≤100 lines (ideal: 40-60)
  • No inline code >10 lines
  • No repeated frontmatter content
  • Anti-patterns use strict format (see below)
  • Complex examples in references/
  • Tables >8 rows moved to references/
  • No description redundancy after Priority

Anti-Patterns (Token Wasters)

  • Verbose Explanations: "This is important because..." → Delete
  • Redundant Context: Same info in multiple places
  • Large Inline Code: Move code >10 lines to references/
  • Conversational Style: "Let's see how to..." → "Do this:"
  • Over-Engineering: Complex structure for simple skills
  • Redundant Descriptions: Do not repeat frontmatter description after ## Priority
  • Oversized Skills: SKILL.md >100 lines → Extract to references/
  • Nested Formatting: Avoid **Bold**: \More Bold`` - causes visual noise
  • Verbose Anti-Patterns: See strict format below

Anti-Pattern Format (Strict)

Format: **No X**: Do Y[, not Z]. [Optional context, max 15 words total]

Examples:

❌ Verbose (24 words):

- **No Manual Emit**: `**Avoid .then()**: Do not call emit() inside Future.then; always use await or emit.forEach.`

✅ Compressed (11 words):

- **No .then()**: Use `await` or `emit.forEach()` to emit states.

❌ Verbose (18 words):

- **No UI Logic**: `**Logic in Builder**: Do not perform calculations or data formatting inside BlocBuilder.`

✅ Compressed (9 words):

- **No Logic in Builder**: Perform calculations in BLoC, not UI.

Progressive Disclosure Checklist

Extract to references/ when:

  • Code examples >10 lines
  • Tables >8 rows
  • Explanatory sections >10 lines
  • Multiple code variants/alternatives
  • Detailed performance benchmarks
  • Step-by-step tutorials

Reference & Examples

Use the enhanced template below to generate new skills: references/TEMPLATE.md

For comprehensive lifecycle guidance: references/lifecycle.md

For resource organization patterns: references/resource-organization.md

平台分布

Claude Code

26.27%
按下载量换算2,856

Antigravity

23.82%
按下载量换算2,590

OpenCode

19.21%
按下载量换算2,089

Cursor

11.22%
按下载量换算1,220

Gemini CLI

7.87%
按下载量换算856

Codex

3.21%
按下载量换算349

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

通过

权限和风险

需要联网

该 Skill 可能需要联网访问来源站点、仓库或外部 API;具体网络访问范围需要结合源码和 README 复核。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。

继续浏览同类 Skills