Microsoft Skill Creator

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is aligned with creating Microsoft technology skills, with only review-worthy notes around optional npm CLI use and persistent generated skill content.

This looks reasonable for its stated purpose. Before installing, decide whether you trust the unknown-source registry package, approve any use of @microsoft/learn-cli, and review generated skills and sample code before enabling or running them.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the MCP server is unavailable, an agent may suggest using a downloaded npm CLI package for documentation lookup.

Why it was flagged

The optional fallback uses npm/npx to run or globally install an unpinned external CLI. This is disclosed and purpose-aligned for Microsoft Learn lookups, but users should consciously approve that dependency.

Skill content
npx @microsoft/learn-cli search "semantic kernel overview" ... npm install -g @microsoft/learn-cli
Recommendation

Prefer the configured Learn MCP server when available; if using the CLI fallback, review the @microsoft/learn-cli package and avoid unnecessary global installs.

What this means

Generated examples could be executed during validation and may have side effects depending on the technology being documented.

Why it was flagged

The validation guidance may lead to running generated sample code. That is expected for a skill-creation workflow, but sample execution should still be reviewed because examples can affect local projects or cloud resources.

Skill content
Verify: Do code samples run without errors?
Recommendation

Review generated code before running it, use test projects or sandboxes, and avoid running examples with production credentials or resources.

What this means

A poorly generated or outdated skill could influence future agent answers and actions.

Why it was flagged

The skill intentionally creates persistent local skill content that may be loaded into future agent context. This is the core purpose, but inaccurate or over-broad generated instructions could steer later agent behavior.

Skill content
Create hybrid skills ... that store essential knowledge locally while enabling dynamic Learn MCP lookups
Recommendation

Review generated SKILL.md, reference files, and sample code before installing or enabling the new skill, and keep source links or update guidance clear.