Index of every page on this site: llms.txt
All skills
Run it yourself

Audit or design agent-facing product capabilities: action/context parity, discoverable contracts, safe mutations, verifiable outcomes, and recovery. Use for explicit agent-readiness reviews of apps, repos, CLIs, APIs, MCP/A2A integrations, or Agent Skills; not every general code or documentation task.

Use this Skill: https://skilld.dev/gh/tristanmanchester/agent-skills/agent-use

Nothing lands on disk. Nothing to clean up.

Fork this Skill

Edit a local copy. It keeps the author and licence.

referencesagent-instructions-and-skills.md

≈359 tokens on demand. Your agent reads this file only when SKILL.md points to it.

Agent instructions and skills

Keep project instructions grounded in actual setup, architecture, checks, generated files, data handling, and release boundaries. A generated AGENTS.md is a draft to review, not permission to replace a project's established instructions.

For a skill, make the trigger precise, the default workflow short, and references conditional on the task. Preserve useful tested helpers and examples; remove unsupported flags and obsolete compatibility layers rather than teaching every historical interface. Optional scripts/references/assets need not exist when the skill does not require them.

Validate YAML with a real parser, including folded/literal descriptions, duplicate keys, field limits, and string-valued metadata. Then inspect links and script syntax without running project code. --help is executable code, not a trusted metadata read. The structural validator does not prove provider compatibility or task success.

Evaluate positive and negative triggers and inspect complete agent traces on real tasks. A JSON file containing evaluation prompts is a fixture, not a passing eval. Measure the improvement relative to using no skill; tighten instructions around observed failure modes rather than adding generic admonitions indefinitely.

Sources reviewed 2026-09-13: format and authoring practice.

Source: SKILL.md on GitHub

skilld matched fixed text patterns in SKILL.md and file names. Patterns miss obfuscated code.

skilld run checks every file with the same patterns. It asks for approval before it loads a Skill with a behavior marked Needs approval.

1 warning1mo3 checks · Risk SAFE
  • Gen Agent Trust Hub1mo

    The skill 'agent-use' is a comprehensive toolkit for auditing and designing agent-ready systems. It includes documentation, templates, and Python scripts for scanning repositories and websites. Security analysis found no malicious intent; identified network and command execution patterns are aligned with the skill's primary purpose as an auditing tool.

  • Socket1mo

    1 alert: gptAnomaly

  • Snyk1mo

    Risk: LOW · No issues

Signed by skilld at 3323bc9. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 2 weeks ago.

Steadyupdated last month
metadata
{
  "version": "3.0.0",
  "reviewed": "2026-09-13"
}
Other metadata
compatibility
Local helper scripts require Python 3.10+; structural validation also requires PyYAML 6.0.3 or later in major 6. Network and execution checks need separately authorised tools and environments.

README badge

README badge for tristanmanchester/agent-skills/agent-use