Describe the workflow. Ship the skill.

A plain-English description — or a PDF, a link, a half-working script — goes in. A validated, security-scanned agent skill comes out: functional code, its own eval suite, a cross-platform installer. The same skill runs on Claude Code, Cursor, Copilot, Gemini, and 13 more.

Architecture diagram: a plain-English description enters the five-phase creator pipeline, the generated skill passes four quality gates before installing on 17 platforms, and the evolve loop feeds failure evidence back into regeneration.
How it fits together — pipeline → gates → install, and the evolve loop after you stop looking. Watch a real quality-gate run.
1.8k+GitHub stars
17platforms, one install
CItests · lint · example rollouts, every commit
MITlicensed, no API key to start

Four stages, one command

The factory is a pipeline. Each stage leaves something checkable behind.

  1. 1.0

    Describe

    No spec writing, no prompt engineering. Hand it whatever exists — a sentence (“every Friday I clean the CRM export and email a PDF report”), a runbook URL, a compliance checklist, a screenshot next to a half-working script. The factory reads the material, uncovers the implicit requirements, and writes its own internal specification before generating anything.

    Don’t even know what to build? Say one word — “freight” — or paste a week of repeated tasks. It harvests the boring, repeated chores actually worth automating, drops the ones a skill can’t ship, and shapes the rest into a spec for you.

  2. 2.0

    Build and gate

    Five phases — discovery, design with evals, architecture, detection, build. Delivery is blocked unless every gate passes:

    • Spec validation — structure, frontmatter, naming, file references
    • Pipeline check — scripts compile, dependencies declared
    • Security scan — hardcoded secrets, dangerous code patterns, prompt injection in the instruction body itself (override phrases, hidden unicode, encoded blobs), and network endpoints scripts reach but never declare
  3. 3.0

    Install everywhere

    One skill, seventeen targets. Claude Code gets a native /plugin install path; Cursor gets .mdc rules; Copilot, Gemini, Windsurf, Cline, Codex and the rest get their own native formats from one auto-detecting installer. Your colleague types one command and has the same skill in their tool.

  4. 4.0

    Evolve

    Every skill is born with its own metric and keeps it for life:

    • Regression gate — rollout runs the skill on golden inputs and diffs the output against promoted baselines; drift that passes every shape check still fails
    • Pinned judge — subjective criteria are graded by a model pinned in the spec, and a known-bad canary must fail or the judge run is invalid
    • Holdout — one golden case is never shown to any optimization loop
    • Model comparison — the same suite runs once per candidate model (--rollout --model A --model B) and answers “which model should run this task, and at what price”; cost comes only from runtime-declared usage, never estimated
    • Evidence, not exit codes — every failure appends its raw findings to the skill’s EVOLUTION.md; evolve.py closes detect → record → re-verify from the skill’s own root

What it doesn’t claim

The gates apply to this page too.

Quick start

No clone, no pip, no API key — just git and any one of 17 supported tools.

macOS / Linux — one line

curl -fsSL https://raw.githubusercontent.com/FrancyJGLisboa/agent-skill-creator/main/scripts/bootstrap.sh | sh

Claude Code — native plugin

/plugin marketplace add FrancyJGLisboa/agent-skill-creator
/plugin install agent-skill-creator@agent-skill-creator

Then describe what you do:

/agent-skill-creator Every Friday I clean the CRM export, calculate regional totals, and email a PDF sales report.

Who it’s for

Developers already in AI tools

You repeat the same workflow across sessions and tools. Turn it into a skill once; install it in every tool you use; let its eval suite tell you when it breaks instead of finding out mid-task.

Teams standardizing agent work

Skills your team publishes pass a hard security gate — no bypass flag — and carry review dates, dependency health checks, and a registry with author namespacing. The robustness story is enforced by code, not convention.

Every claim on this page traces to a gate, a test, or a commit.

Read the source