external/trailofbits-skills-curated/plugins/skill-extractor/skills/skill-extractor/SKILL.md
Extracts reusable skills from work sessions. Use when: (1) a non-obvious problem was solved worth preserving, (2) a pattern was discovered that would help future sessions, (3) a workaround or debugging technique needs documentation. Manual invocation only via /skill-extractor command - no automatic triggers or hooks.
npx skillsauth add seikaikyo/dash-skills skill-extractorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Extracts reusable knowledge from work sessions and saves it as a Claude Code skill.
Use these prompts to identify knowledge worth extracting:
If you can't answer at least two of these with something non-trivial, it's probably not worth extracting.
/skill-extractor [--project] [context hint]
~/.claude/skills/[name]/SKILL.md--project: saves to .claude/skills/[name]/SKILL.md/skill-extractor the cyclic data DoS fix)Before creating a new skill, search for existing ones that might cover the same ground:
# Check user skills
ls ~/.claude/skills/
# Check project skills
ls .claude/skills/
# Search by keyword
grep -r "keyword" ~/.claude/skills/ .claude/skills/ 2>/dev/null
If a related skill exists, consider updating it instead of creating a new one. See skill-lifecycle.md for guidance on when to update vs create.
If $ARGUMENTS contains a context hint (e.g., "the cyclic data DoS fix"), use it to focus the extraction on that specific topic.
Analyze the conversation to identify:
Present a brief summary to the user:
I identified this potential skill:
**Problem:** [Brief description]
**Key insight:** [What made it non-obvious]
**Triggers:** [Error messages or symptoms]
Evaluate the candidate skill against these criteria:
| Criterion | Pass? | Evidence | |-----------|-------|----------| | Reusable - Helps future tasks, not just this instance | | [Why] | | Non-trivial - Required discovery, not docs lookup | | [Why] | | Verified - Solution actually worked | | [Evidence] | | Specific triggers - Exact error messages or scenarios | | [What they are] | | Explains WHY - Trade-offs and judgment, not just steps | | [How] | | Value-add - Teaches judgment, not just facts Claude could look up | | [How] |
Present assessment to user and ask: "Proceed with extraction? [yes/no]"
The user decides whether to proceed regardless of how many criteria pass. Respect their judgment - if they say yes, extract; if no, skip.
Ask the user:
--project)If the topic involves a specific library or framework:
Skip research for:
Use the template from skill-template.md.
Quality standards: Follow quality-guide.md to ensure the skill provides lasting value. Key points:
Run through the validation checklist in skill-template.md. If validation fails, fix the issues before saving.
Create the directory and save:
~/.claude/skills/[name]/SKILL.md.claude/skills/[name]/SKILL.mdReport success:
Skill saved to: [path]
The skill will be available in future sessions when the context matches:
"[first line of description]"
When extracting, consider how the new knowledge relates to existing skills:
Combine or separate?
Update vs create:
Cross-referencing:
Skills aren't permanent. See skill-lifecycle.md for guidance on:
If you catch yourself thinking any of these, do NOT extract:
Scenario: User discovered that an AST visitor crashes with RecursionError when analyzing serialized files containing cyclic references (e.g., a list that contains itself).
Identified learning:
Generated skill name: cyclic-ast-visitor-hardening
Key sections:
visited: set parameter, check before recursingdevelopment
拋棄式 HTML mockup 比稿:產出 2 到 3 個設計立場不同的變體(密度 / 版式 / 強調軸,不是換色),各附取捨說明,最後給有立場的對比結論。適用:「畫個草圖」「比較 A 版 B 版」「先看方向再做」「給我看幾種做法」。要 production 元件或設計已定案時不適用。
tools
需求不明時的意圖萃取訪談:一次一題、每題附上自己的猜測、聽出「真正想要 vs 覺得應該要」,直到能預測使用者反應(約 95% 信心)才動工。適用:需求缺少對象 / 動機 / 成功標準 / 約束,或使用者點名「訪談我」「先確認一下」「我們確定嗎」。明確自足的指示、純資訊查詢、機械性操作不適用。
development
對非平凡決策啟動新鮮 context 對抗審查(找碴不背書),在修正還便宜的時候抓出錯誤方向。適用:高風險改動(production、資安敏感邏輯、不可逆操作)、不熟的程式碼、要宣稱「這樣是安全的 / 可行的」之前。機械性操作與一行修改不適用。
testing
Reference for writing and editing agent skills well — the vocabulary and principles that make a skill predictable. Consult when authoring, reviewing, or pruning a SKILL.md.