first skill
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a legitimate skill-creation guide with helper scripts that write local skill templates, so users should review generated skills and choose paths carefully.
This skill is reasonable to install if you want help creating skills. Be careful when running its helper scripts: choose the destination path deliberately, validate the generated skill, and review any future skill scripts or instructions before letting an agent use them.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If run with the wrong path or name, it could create persistent skill files in an unintended local directory.
The helper script writes a new skill scaffold and executable example file under a user-supplied path. This is expected for a skill-creation tool, but it is still local filesystem mutation.
skill_dir = Path(path).resolve() / skill_name ... skill_dir.mkdir(parents=True, exist_ok=False) ... skill_md_path.write_text(skill_content) ... example_script.chmod(0o755)
Run the initializer only with a reviewed skill name and destination path, then inspect the generated files before using the new skill.
A poorly written or untrusted generated skill could influence future agent responses or tool use.
The skill teaches creation of persistent agent instructions that may be loaded in future tasks based on their descriptions.
skills are stored in `~/.deepagents/<agent>/skills/` ... Frontmatter ... agent reads to determine when the skill gets used
Review generated SKILL.md content, especially the description and any bundled scripts, before relying on it in future agent sessions.