skills/spawn/SKILL.md
Generate PhD-level expert agent prompts for Claude Code. Creates comprehensive 500-1000 line agents with detailed patterns, code examples, and best practices. Triggers on: spawn agent, create agent, generate expert, new agent, agent genesis.
npx skillsauth add 0xDarkMatter/claude-mods spawnInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Generate world-class, comprehensive expert agent prompts for Claude Code. Each agent should be a definitive reference for its domain - the kind of guide a PhD-level practitioner would create.
Target quality: 500-1000 lines per agent with real code examples, complete configs, and detailed patterns.
Benchmark agents: python-expert.md (1600 lines), claude-architect.md (1242 lines), react-expert.md (440 lines)
Generate one expert agent prompt for a specific technology platform.
Prompt for:
Create multiple agent prompts from a list of technology platforms.
Accept:
Analyze a tech stack or architecture description and suggest relevant agents.
Process:
All agents MUST be created as Markdown files with YAML frontmatter:
.claude/agents/ (current project only)~/.claude/agents/ or C:\Users\[username]\.claude\agents\ (all projects)File Structure:
---
name: technology-name-expert
description: When this agent should be used. Can include examples and use cases. No strict length limit - be clear and specific. Include "use PROACTIVELY" for automatic invocation.
model: inherit
color: blue
---
[Agent system prompt content here]
YAML Frontmatter Fields:
name (required): Unique identifier, lowercase-with-hyphens (e.g., "asus-router-expert")description (required): Clear, specific description of when to use this agent
tools (optional): Comma-separated list of allowed tools (e.g., "Read, Grep, Glob, Bash")
model (optional): Specify model ("sonnet", "opus", "haiku", or "inherit" to use main session model)color (optional): Visual identifier in UI ("blue", "green", "purple", etc.)File Creation: Agents can be created programmatically using the Write tool:
Project-level: .claude/agents/[platform]-expert.md
Global/User-level: ~/.claude/agents/[platform]-expert.md (or C:\Users\[username]\.claude\agents\ on Windows)
Choosing Scope:
.claude/agents/): Specific to the current project, can be version controlled and shared with team~/.claude/agents/): Available across all projects on your machineAfter creation, the agent is immediately available for use with the Task tool.
Essential Reading:
Key Concepts from Documentation:
~/.claude/agents/) are available across all projects.claude/agents/) are project-specific and shareable/agents command for the recommended UI to manage agentsFor each agent, create a comprehensive expert prompt with:
Agent Content Structure (10-Part Template):
Every generated agent MUST follow this comprehensive 10-part structure:
Plus: Quality Checklist, Anti-Patterns (5-10 with bad/good code), Canonical Resources (10-15 URLs)
See python-expert.md and react-expert.md in agents/ for reference implementations.
Requirements:
Ask user to choose scope:
.claude/agents/ (project-specific, version controlled)~/.claude/agents/ or C:\Users\[username]\.claude\agents\ (all projects)Ask user to choose format:
File Creation Process: When creating files programmatically:
.claude/agents/[platform-name]-expert.md~/.claude/agents/[platform-name]-expert.md (or Windows equivalent)User: /spawn
Agent: [Shows multi-tab AskUserQuestion with 5 tabs]
Tab 1 (Mode): Single Agent / Batch Generation / Architecture Analysis
Tab 2 (Scope): Project Agent / Global Agent
Tab 3 (Output): Create File / Show in Chat / Both
Tab 4 (Platform): Custom Platform / [or popular options]
Tab 5 (Focus): [Multi-select] General Coverage / Caching Patterns / Pub/Sub / etc.
User: [Selects all answers and submits once]
Mode: Single Agent
Scope: Global Agent
Output: Both
Platform: Redis (via Other field)
Focus: General Coverage, Caching Patterns, Pub/Sub
Agent: [Generates Redis expert prompt and saves to ~/.claude/agents/redis-expert.md]
User: /spawn
Agent: [Shows multi-tab AskUserQuestion with 3 tabs]
Tab 1 (Mode): Single Agent / Batch Generation / Architecture Analysis
Tab 2 (Scope): Project Agent / Global Agent
Tab 3 (Output): Create Files / Show in Chat / Both
User: [Submits]
Mode: Batch Generation
Scope: Project Agent
Output: Create Files
Agent: Please provide platforms (one per line):
User: PostgreSQL
Redis
RabbitMQ
Agent: [Creates 3 .md files in .claude/agents/ (project directory)]
User: /spawn
Agent: [Shows multi-tab AskUserQuestion with 3 tabs]
Tab 1 (Mode): Single Agent / Batch Generation / Architecture Analysis
Tab 2 (Scope): Project Agent / Global Agent
Tab 3 (Output): Create Files / Show in Chat / Both
User: [Submits]
Mode: Architecture Analysis
Scope: Global Agent
Output: Both
Agent: Describe your architecture or provide file path:
User: E-commerce platform: Next.js frontend, Node.js API, PostgreSQL, Redis cache, Stripe payments, AWS S3 storage, SendGrid emails
Agent: Found platforms: Next.js, Node.js, PostgreSQL, Redis, Stripe, AWS S3, SendGrid
[Shows multi-select AskUserQuestion]
User: [Selects: nextjs-expert, postgres-expert, redis-expert, stripe-expert]
Agent: [Generates 4 selected agents in ~/.claude/agents/]
Ask All Questions at Once using a single multi-question AskUserQuestion call:
For Single Mode, also ask in the same call:
For Single Mode:
For Batch Mode:
.claude/agents/[platform]-expert.mdFor Architecture Analysis:
Generate Each Agent Prompt:
Output:
.claude/agents/[platform]-expert.md~/.claude/agents/[platform]-expert.md (Unix/Mac) or C:\Users\[username]\.claude\agents\[platform]-expert.md (Windows)Important: Always use a single AskUserQuestion call with multiple questions (2-4) to create the multi-tab interface. Never ask questions sequentially one at a time.
Before outputting each agent prompt, verify:
[name].mdAfter creating agents, remind user:
Additional Resources:
/agents command to view and manage all available agentstools
Behavioural-first software supply chain defense - catches poisoned npm/PyPI packages in the publish-to-advisory window that CVE tools miss. Use BEFORE every install or version bump (not only when an attack is suspected) - the 7-day cooldown gate + behavioural score catches freshly-published malware that CVE tools won't see for days. Socket.dev integration (free CLI + GitHub app + depscore MCP for Claude Code), stale-OIDC audit, dependency cooldown policy, publish-token rotation, VS Code extension audit, and a self-integrity scan that detects worm persistence hooks injected into Claude Code / VS Code settings. Triggers on: pip install, uv add, uv tool install, npm install, pnpm add, yarn add, cargo add, go get, composer require, gem install, upgrade dependency, dependency upgrade, version bump, bump version, bump package, adding dependency, new dependency, vetting a dependency, vet package, is this package safe, safe to install, should I install, before installing, pre-install check, preinstall scan, preinstall-check, PyPI cooldown, npm cooldown, release cooldown, minimumReleaseAge, score a package, package score, depscore, socket score, supply chain, supply chain attack, malicious package, poisoned dependency, npm worm, Shai-Hulud, behavioural scanning, Socket.dev, socket scan, dependency security, postinstall malware, OIDC token theft, compromised maintainer, typosquat, dependency confusion, package provenance, SLSA, persistence hook, malicious VS Code extension.
testing
GitHub remote operations — repo creation, metadata (description/homepage/topics), releases, README 'Recent Updates' enforcement, and issue / PR management with preview-before-send discipline. Companion to git-ops (local) and push-gate (pre-push safety). Three modes: new (first publish), update (subsequent release), audit (read-only checklist), plus atomic operations for issues and PRs. Triggers on: push to github, publish repo, ship release, cut release, gh release, set topics, repo description, github metadata, recent updates section, audit github repo, repo visibility, make repo public, gh repo create, gh issue, gh pr, create issue, comment on issue, close issue, triage issue, create PR, review PR, merge PR, pre-merge check, pr checks.
tools
Defend the agent's instruction surface against adversarial content - hidden-Unicode prompt injection (Trojan Source bidi reordering, U+E0000 tag-block ASCII smuggling, zero-width text), homoglyph confusables, and poisoned context that a human reviewer can't see but the model obeys. Scan CLAUDE.md / AGENTS.md / SKILL.md / .cursorrules and MCP tool descriptions; sanitize fetched web pages, issue/PR bodies, and dependency READMEs before they enter context. Triggers on: prompt injection, hidden unicode, invisible characters, zero-width space, bidi override, Trojan Source, ASCII smuggling, tag characters, homoglyph, confusable, unicode steganography, poisoned CLAUDE.md, malicious tool description, MCP tool poisoning, instruction injection, jailbreak in file, is this file safe, sanitize untrusted content, scan for hidden text.
tools
Set tool permissions for Claude Code. Configures allowed commands, rules, and preferences in .claude/ directory. Triggers on: setperms, init tools, configure permissions, setup project, set permissions, init claude.