ai-tooling/skills/add-skill/SKILL.md
Create or improve agent skills. Load when creating SKILL.md files, writing skill descriptions, or structuring skill content.
npx skillsauth add nicholasgriffintn/machine-setup add-skillInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Skills extend agent capabilities with domain-specific knowledge. Use skills for procedural knowledge the agent lacks, not concepts it already understands.
If guidance is project-specific or one-off, use INSTRUCTIONS.md or inline context instead.
Create new skills under ~/workspace/machine-setup/ai-tooling/skills.
Every SKILL.md must start with YAML frontmatter on line 1:
---
name: my-skill-name
description: What this skill does and when to use it. Third-person.
---
Field requirements:
name: lowercase, hyphens only, max 64 chars, no reserved words ("anthropic", "claude")description: max 1024 chars, specific triggers + capabilitiesskill-name/
├── SKILL.md # Required. Under 200 lines.
└── references/ # Optional. For detailed content.
├── api.md
└── examples.md
Use references/ when SKILL.md exceeds 200 lines. Keep references one level deep and avoid nested references.
The description determines when the skill activates. Include both what it does and when to use it.
Always use third-person (the description is injected into the system prompt):
| Quality | Example |
| ------- | ------------------------------------------------------------------------------------------------------ |
| Good | Manages GitLab MRs and pipelines via glab CLI. Load before running glab commands. |
| Good | Analyses web performance with Chrome DevTools MCP. Use when auditing page load or Lighthouse scores. |
| Bad | I help you with GitLab operations. |
| Bad | Useful for various tasks. |
Include key terms users might mention: tool names, file extensions, and specific operations.
High freedom (multiple valid approaches):
Review code for potential bugs, readability, and adherence to project conventions.
Medium freedom (preferred pattern with variation):
Use pdfplumber for text extraction. For scanned PDFs requiring OCR, use pdf2image instead.
Low freedom (fragile operations):
Run exactly: `python scripts/migrate.py --verify --backup`
Do not modify flags.
For CLIs and APIs, provide lookup tables:
| Task | Command |
| ------------ | --------------------- |
| Check status | `glab ci status` |
| View logs | `glab ci trace <job>` |
| Retry job | `glab ci retry <job>` |
Check requirements before proceeding:
## FIRST: Verify Installation
Run this before any commands. If it fails, stop; this skill does not apply.
\`\`\`bash
glab --version
\`\`\`
For multi-step tasks, provide a copyable checklist:
## Workflow
Copy this checklist to track progress:
\`\`\`
- [ ] Step 1: Analyse input
- [ ] Step 2: Validate mapping
- [ ] Step 3: Apply changes
- [ ] Step 4: Verify output
\`\`\`
Show input/output pairs instead of abstract descriptions:
**Input**: Added user authentication with JWT tokens
**Output**:
\`\`\`
feat(auth): implement JWT-based authentication
\`\`\`
SKILL.md → file.md → another.md breaks navigationBefore finalising a skill:
---name is lowercase with hyphens onlydescription includes triggers and capabilities (third-person)SKILL.md is under 200 lines (use references/ if larger)SKILL.mdtools
Cloudflare Workers CLI for deploying, developing, and managing Workers, KV, R2, D1, Vectorize, Hyperdrive, Workers AI, Containers, Queues, Workflows, Pipelines, and Secrets Store. Load before running wrangler commands to ensure correct syntax and best practices.
tools
Audits web performance using Chrome DevTools MCP. Measures Core Web Vitals, finds render-blocking resources, dependency chains, layout shifts, caching issues, and accessibility gaps. Use for audits, profiling, debugging, or optimising page load performance and Lighthouse scores.
development
Drives changes through a strict red-green-refactor loop using behaviour tests at the public interface. Use when the user asks for TDD, test-first development, integration tests, regression coverage, or a feature built one vertical slice at a time.
testing
A specialist skill for security reviews, threat modeling, and remediation guidance. Use for auth/permissions changes, secrets or PII handling, public endpoints, or dependency upgrades.