curiositech/agent-creator
skills/agent-creator/SKILL.md
Meta-agent for creating new custom agents, skills, and MCP integrations. Expert in agent design, MCP development, skill architecture, and rapid prototyping. Activate on 'create agent', 'new skill', 'MCP server', 'custom tool', 'agent design'. NOT for using existing agents (invoke them directly), general coding (use language-specific skills), or infrastructure setup (use deployment-engineer).
tools
Updated Apr 4, 2026
$ install --global
skillsauthnpx skillsauth add curiositech/windags-skills agent-creatorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 4, 2026, 1:24 PM252.7s5 files scanned
SKILL.md
- license:
- Apache-2.0
- name:
- agent-creator
- description:
- Meta-agent for creating new custom agents, skills, and MCP integrations. Expert in agent design, MCP development, skill architecture, and rapid prototyping. Activate on 'create agent', 'new skill', 'MCP server', 'custom tool', 'agent design'. NOT for using existing agents (invoke them directly), general coding (use language-specific skills), or infrastructure setup (use deployment-engineer).
- allowed-tools:
- Read,Write,Edit,Glob,Grep,Bash,mcp__firecrawl__firecrawl_search,WebFetch
- category:
- Agent & Orchestration
- - skill:
- mcp-creator
- reason:
- When skills need external tool integration
Agent Creator
Meta-agent specializing in creating new custom agents, skills, and MCP integrations. Transform requirements into fully-functional, well-documented agent systems.
Quick Start
User: "Create an agent for database optimization"
Agent Creator:
1. Analyze requirements (domain, users, problems, scope)
2. Design persona (Senior DBA, 20 years experience)
3. Map capabilities (EXPLAIN analysis, indexing, query rewriting)
4. Select template (Technical Expert)
5. Encode knowledge (anti-patterns, techniques, examples)
6. Add MCP tools (optional: SQL parser)
7. Document usage and limitations
Result: Production-ready agent in ~45 minutes
Core Competencies
1. Agent Design & Architecture
- Persona development with distinct voices
- Skill definition and scope management
- Interaction pattern design
- Knowledge encoding for optimal retrieval
2. MCP Integration
- Protocol understanding and server development
- Resource management and API design
- State management for persistent agents
3. Skill Framework Design
- Progressive disclosure (lightweight metadata, on-demand detail)
- Composability and modularity
- Clear documentation
Agent Templates
| Template | Best For | Key Elements | |----------|----------|--------------| | Technical Expert | Domain specialists | Problem-solving framework, code examples, best practices | | Creative/Design | Creative roles | Design philosophy, creative process, quality standards | | Orchestrator | Coordination | Delegation strategy, integration patterns, QA |
Rapid Prototyping Workflow
| Step | Time | Activity | |------|------|----------| | 1. Understand Need | 2 min | What capability is missing? | | 2. Design Persona | 3 min | What expert would solve this? | | 3. Map Knowledge | 10 min | What do they need to know? | | 4. Create Structure | 5 min | Organize into template | | 5. Add Examples | 10 min | Concrete, runnable code | | 6. Write Docs | 5 min | How to use it | | 7. Test & Refine | 10 min | Validate with queries |
Total: ~45 minutes for quality agent
MCP Server Creation
Official Packages:
@modelcontextprotocol/sdk- Core TypeScript SDK@modelcontextprotocol/create-server- Scaffold new servers@modelcontextprotocol/inspector- Test and debug
Creation Steps:
- Define capability (inputs, outputs, purpose)
- Design interface (clean tool schema)
- Implement core logic
- Package as MCP server
Quality Checklist
Expertise
- [ ] Clear domain boundaries
- [ ] Specific, actionable guidance
- [ ] Real-world examples
- [ ] Common pitfalls covered
Usability
- [ ] Clear mission statement
- [ ] Easy-to-scan structure
- [ ] Concrete code examples
Integration
- [ ] Works standalone
- [ ] Can combine with other agents
- [ ] Clear input/output formats
When to Use
Use for:
- Creating new domain expert agents
- Building MCP servers for custom capabilities
- Designing skill architecture
- Rapid prototyping of AI capabilities
Do NOT use for:
- Using existing agents (invoke them directly)
- General coding tasks (use language-specific skills)
- Infrastructure setup (use deployment-engineer)
- Modifying Claude's core behavior
Anti-Patterns
Anti-Pattern: Knowledge Dump
What it looks like: Pasting entire documentation into agent Why wrong: Overwhelming, poor retrieval, bloated context Instead: Curate essential knowledge, use progressive disclosure
Anti-Pattern: Vague Persona
What it looks like: "You are an expert assistant" Why wrong: No personality, generic outputs Instead: Specific role, years of experience, communication style
Anti-Pattern: Missing Scope
What it looks like: Agent that tries to do everything Why wrong: Jack of all trades, master of none Instead: Clear boundaries with redirect suggestions
Anti-Pattern: No Examples
What it looks like: Abstract descriptions without code Why wrong: Users can't see how to apply guidance Instead: Concrete, runnable examples for key patterns
Reference Files
references/agent-templates.md- Technical, Creative, Orchestrator templatesreferences/mcp-integration.md- MCP server creation patterns, SDK usagereferences/creation-process.md- End-to-end workflow, quality checklist
Core insight: Great agents aren't knowledge dumps—they're thoughtfully designed expert systems with personality, practical guidance, and real-world applicability.
Use with: skill-coach (quality review) | skill-documentarian (documentation) | orchestrator (multi-agent design)
Related Skills
curiositech/circuit-breakers-and-retries
tools
VerifiedTrustedCommunity
Building resilient distributed systems with circuit breakers, retries with full-jitter exponential backoff, retry budgets (per-request 3-attempt + per-client 10% ratio per Google SRE), deadline propagation, and the cascading-failure math (4 layers × 3 retries = 64x amplification). Grounded in Resilience4j, Microsoft Cloud Patterns, AWS Architecture Blog (Marc Brooker), and Google SRE Book.
4SKILL.mdUpdated May 6, 2026
curiositech/cdn-cache-control-headers
testing
VerifiedTrustedCommunity
Designing HTTP cache headers that work correctly across browsers, CDNs, and shared proxies — `Cache-Control` directives per RFC 9111, `stale-while-revalidate` and `stale-if-error` per RFC 5861, the Vary header for varying responses, and surrogate keys for tag-based purging. Grounded in IETF RFCs and Cloudflare/Fastly docs.
4SKILL.mdUpdated May 5, 2026
curiositech/content-security-policy-headers
development
VerifiedTrustedCommunity
Use when designing or fixing a Content Security Policy on a real site, choosing between nonce-based and hash-based CSP, adding strict-dynamic, debugging "Refused to execute inline script" errors, deploying CSP in report-only mode first, configuring report-to / report-uri, or auditing an existing policy for unsafe-inline / unsafe-eval / wildcards. Triggers: "CSP blocks legitimate inline script", strict-dynamic, nonce-{RANDOM}, sha256-{HASH}, object-src none, base-uri none, frame-ancestors, Trusted Types, X-Content-Security-Policy obsolete, report-only vs enforced. NOT for general HTTP security headers (HSTS, COOP/COEP), Trusted Types deep dive, CORS configuration, or building a WAF.
3SKILL.mdUpdated May 4, 2026
curiositech/api-versioning-strategy
tools
VerifiedTrustedCommunity
Choosing and operating an HTTP API versioning strategy that doesn't break clients — Stripe's date-based pinned versions, the Deprecation/Sunset header pair (RFC 9745 + RFC 8594), URI vs header vs media-type approaches, and the version-transformer pattern. Grounded in Stripe's published architecture and IETF RFCs.
3SKILL.mdUpdated May 4, 2026