.claude/skills/skills-expert/SKILL.md
Provide expert guidance on skills architecture, YAML frontmatter, tool permissions, and debugging. Use when creating, troubleshooting, or validating skills. Trigger with "skill not loading", "frontmatter", or "allowed-tools".
npx skillsauth add intent-solutions-io/plugins-nixtla skills-expertInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Provide expert guidance on Claude Code skills development, validation, and troubleshooting.
This skill transforms Claude into a Claude Skills architecture expert. Use when:
.claude/skills/ or skills-pack/.claude/skills/| Field | Max Length | Purpose |
|-------|------------|---------|
| name | 64 chars | Identifier used as command in Skill tool invocation |
| description | 1024 chars | Primary signal Claude uses to decide when to invoke skill |
| Field | Type | Purpose |
|-------|------|---------|
| allowed-tools | CSV string | Pre-approved tools during skill execution |
| model | string | Override model ("inherit" or model ID) |
| version | string | Semantic versioning (e.g., "1.0.0") |
| license | string | License metadata |
| mode | boolean | true = appears in Mode Commands section |
| disable-model-invocation | boolean | true = requires manual /skill-name |
| Field | Behavior |
|-------|----------|
| when_to_use | Appends to description with hyphen separator |
Critical Rule: Skill MUST have description OR when_to_use or it's filtered out.
skill-name/
├── SKILL.md # Core prompt + frontmatter (required)
├── scripts/ # Python/Bash executables
├── references/ # Documentation loaded via Read tool
└── assets/ # Templates, static files (referenced by path)
Template variable resolving to skill installation directory:
## Resources
- Skill standard: `{baseDir}/references/skill-standard.md`
Never hardcode absolute paths.
Permissions in allowed-tools are scoped to skill execution only:
# Granular scoping examples
allowed-tools: "Bash(git:*),Read,Grep" # Only git commands
allowed-tools: "Bash(npm:*),Read,Write" # Only npm commands
allowed-tools: "Read,Glob,Grep" # Read-only audit
Claude decides skill invocation through pure language understanding:
<available_skills> section"skill-name": descriptioncommandNo embeddings, regex, or classifiers - pure LLM reasoning.
Skill tool with command: "skill-name"<command-message>The "skill-name" skill is loading</command-message>allowed-toolsSkills loaded in order (later overrides earlier):
~/.config/claude/skills/).claude/skills/)tools array as part of Skill meta-toolwhen_to_use is undocumented/experimental - Safer to rely on detailed description{baseDir}1. VALIDATION
- Syntax checking
- Skill existence verification
- Frontmatter parsing
2. PERMISSION EVALUATION
- Deny rules checked first (blocking patterns)
- Allow rules checked second (pre-approved)
- Default: prompt user for approval
3. LOADING & INJECTION
- SKILL.md content loaded
- Two messages injected (visible + hidden)
- Context modifier applied
- Tool permissions scoped
Skills are NOT in system prompts. They're bundled in the tools array:
tools: [
{ name: "Read", ... },
{ name: "Write", ... },
{
name: "Skill", // Meta-tool
inputSchema: { command: string },
prompt: "<available_skills>..." // Dynamic, contains all skill descriptions
}
]
This enables dynamic loading without system prompt manipulation.
description or when_to_use existsdisable-model-invocation: true blocking auto-discovery# Nixtla Standard Checklist
- [ ] name: lowercase + hyphens, matches folder name
- [ ] description: action-oriented, <1024 chars
- [ ] version: semver format
- [ ] allowed-tools: minimal necessary
- [ ] NO deprecated fields (author, priority, audience)
- [ ] mode: true ONLY for mode skills
- [ ] disable-model-invocation: true ONLY for infra/dangerous skills
| Issue | Solution | |-------|----------| | Skill not discovered | Check description/when_to_use exists | | Tools not working | Verify allowed-tools syntax | | Wrong skill invoked | Improve description specificity | | Skill filtered out | Add required frontmatter fields |
description that includes both “Use when …” and “Trigger with …”.allowed-tools and scoped Bash(...) usage.004-scripts/validate_skills_v2.py003-skills/.claude/skills/---
name: my-skill
description: Generate reports from CSV data. Use when user has CSV files and needs analysis.
allowed-tools: "Read,Write,Glob"
version: "1.0.0"
---
---
name: expert-mode
description: Transform Claude into domain expert for extended session.
mode: true
allowed-tools: "Read,Write,Glob,Grep,Edit,Bash"
version: "1.0.0"
---
---
name: deploy-skill
description: Deploy application to production. Dangerous - requires explicit invocation.
disable-model-invocation: true
allowed-tools: "Bash(deploy:*),Read,Glob"
version: "1.0.0"
---
{baseDir}/references/skill-standard.mdtools
This skill assists with managing database sharding strategies. It is activated when the user needs to implement horizontal database sharding to scale beyond single-server limitations. The skill supports designing sharding strategies, distributing data across multiple database instances, and implementing consistent hashing, automatic rebalancing, and cross-shard query coordination. Use this skill when the user mentions "database sharding", "sharding implementation", "scale database", or "horizontal partitioning". The plugin helps design and implement sharding for high-scale applications.
tools
This skill enables Claude to perform comprehensive database security scans using the database-security-scanner plugin. It is triggered when the user requests a security assessment of a database, including identifying vulnerabilities like weak passwords, SQL injection risks, and insecure configurations. The skill leverages OWASP guidelines to ensure thorough coverage and provides remediation suggestions. Use this skill when the user asks to "scan database security", "check database for vulnerabilities", "perform OWASP compliance check on database", or "assess database security posture". The plugin supports PostgreSQL and MySQL.
testing
This skill enables Claude to design and visualize database schemas. It leverages normalization guidance (1NF through BCNF), relationship mapping, and ERD generation to create efficient and well-structured databases. Use this skill when the user requests to "design a database schema", "create a database model", "generate an ERD", "normalize a database", or needs help with "database design best practices". The skill is triggered by terms like "database schema", "ERD diagram", "database normalization", and "relational database design".
tools
This skill enables Claude to manage database replication, failover, and high availability configurations using the database-replication-manager plugin. It is designed to assist with tasks such as setting up master-slave replication, configuring automatic failover, monitoring replication lag, and implementing read scaling. Use this skill when the user requests help with "database replication", "failover configuration", "high availability", "replication lag", or "read scaling" for databases like PostgreSQL or MySQL. The plugin facilitates both physical and logical replication strategies.