skill-development

Warn

Audited by Runlayer on Feb 23, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
2
Flagged
2
Chunks
6
Flagged Files (2)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/4] Description: --- name: skill-development description: This skill should be used when the user wants to "create a skill", "add a skill to plugin", "write a new skill", "improve skill description", "organize skill content", or needs guidance on skill structure, progressive disclosure, or skill development best practices for Claude Code plugins. version: 0.1.0 --- # Skill Development for Claude Code Plugins This skill provides guidance for creating effective skills for Claude C

Configure the MCP server with authentication.

Tool: SKILL.md [4/4] Description: Put everything in SKILL.md (>3,000 words without references/) - Write in second person ("You should...") - Leave resources unreferenced - Include broken or incomplete examples - Skip validation ## Additional Resources ### Study These Skills Plugin-dev's skills demonstrate best practices: - `../hook-development/` - Progressive disclosure, utilities - `../agent-development/` - AI-assisted creation, references - `../mcp-integration/` - Comprehensive references - `.

references/skill-creator-original.mdHIGH
78.3%

Malicious tool definition detected

**SKILL.md body** - When skill triggers (<5k words) 3. **Bundled resources** - As needed by Claude (Unlimited*) *Unlimited because scripts can be executed without reading into context window. ## Skill Creation Process To create a skill, follow the "Skill Creation Process" in order, skipping steps only if there is a clear reason why they are not applicable.

Tool: references/skill-creator-original.md [2/2] Description: a `big-query` skill to handle queries like "How many users have logged in today?" the analysis shows: 1. Querying BigQuery requires re-discovering the table schemas and relationships each time 2.

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
2
Files Flagged
2
Chunks Analyzed
6
Analyzed
Feb 23, 2026, 03:11 AM
Security Audit — runlayer — skill-development