Skills

skill-creator

skill-creator is a skill in bubbuild/bub, last changed 27 Apr 2026. It can run shell commands, name web addresses and bundle scripts. Our pattern check flagged nothing at commit a3f62c2 on 27 Oct 2026.

Pattern check: nothing flagged · commit a3f62c2 · 27 Oct 2026

Install
From the author
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Bub's capabilities with specialized knowledge, workflows, or tool integrations.
Licence
Apache 2.0
Repo stars
1.7k
Folder last changed
27 Apr 2026 (opens in a new tab)
Publisher
bubbuild
Files
4 files
Checked
a3f62c2 (opens in a new tab) · 27 Oct 2026

Install

Each tab says whether it installs commit a3f62c2, the one we checked, or the latest version.

No tab for your agent? Use Any agent for OpenCode, Goose, Windsurf (Devin Desktop), Zed, Roo Code, Factory Droid, Junie, Amp and Antigravity, and Claude Code for Cline. Kiro needs the folder copied by hand.

Pinned to commit a3f62c2, the one we checked.

From your project's root folder:

tmp="$(mktemp -d)" &&
  git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/bubbuild/bub.git "$tmp" &&
  git -C "$tmp" fetch -q --depth 1 origin a3f62c23d2fbf1e71127cbd1c1597a338c8b2bd0 &&
  git -C "$tmp" sparse-checkout set -- src/skills/skill-creator &&
  git -C "$tmp" checkout -q a3f62c23d2fbf1e71127cbd1c1597a338c8b2bd0 &&
  mkdir -p .claude/skills &&
  mkdir .claude/skills/skill-creator &&
  cp -R "$tmp"/src/skills/skill-creator/. .claude/skills/skill-creator/ &&
  rm -rf "$tmp"

If Claude Code was already running and this created the skills folder, run /reload-skills.

Claude Code docs (opens in a new tab)

What it can touch

From the files and frontmatter at commit a3f62c2. This is how much a skill can do, not whether it is risky.

What it can touch: Scripts or outside hosts

  • Runs shell commands

    Its instructions or files give the agent commands to run on your computer.

  • Names web addresses

    It mentions outside web addresses the agent may visit. We list them but don't follow them.

  • Bundles scripts

    The folder holds code files the agent may run.

Pattern check

Pattern check: nothing flagged · commit a3f62c2 · 27 Oct 2026

We checked every text file in this skill, at commit a3f62c2 on 27 Oct 2026, against 45 published patterns such as download-and-run commands, hidden text and credential access. We don't run the skill, we don't read the web pages it points to, and we can't judge everything its instructions might lead an agent to do. In published tests, pattern checks like this one missed most malicious skills. Read the skill before you install it — especially anything it asks you to download or run.

How the check worksReport an incorrect finding

Outside links we did not follow

  • http://www.apache.org/licenses/
  • http://www.apache.org/licenses/LICENSE-2.0

Format check

Each agent reads SKILL.md a little differently. We check the file against each one's published rules; we don't run the skill in any agent.

  • Agent Skills specPasses

    The open format from agentskills.io, held to what the strictest agents enforce, so one folder loads everywhere.

    • Note

      There is no license field, so readers can't tell whether they may reuse the skill. O2

      Fix: Add license: with an SPDX name such as MIT or Apache-2.0, or the name of a bundled licence file.

  • Claude CodePasses
  • Claude apps & API uploadPasses

    Uploading to claude.ai or the Claude API, or packaging with Anthropic's script, accepts only the six spec fields and stops on anything else.

    • Note

      The description is 223 characters. The claude.ai Help Center says 200 at most, though Anthropic's API docs and validator allow 1,024. D4

      Fix: If the claude.ai upload refuses it, trim the description to 200 characters.

  • OpenAI (Codex & API)Passes
  • VS Code & CopilotPasses

SKILL.md

Files

4 files

PathSize
SKILL.md (opens in a new tab)17.9 KB
license.txt (opens in a new tab)11.1 KB
scripts/init_skill.py (opens in a new tab)13.9 KB
scripts/quick_validate.py (opens in a new tab)3.3 KB

More from bubbuild/bub

  • gh

    bubbuild/bub

    GitHub CLI skill for interacting with GitHub via the gh command line tool. Use when Bub needs to (1) Create, view, or manage GitHub repositories, (2) Work with issues and pull requests, (3) Create and manage releases, (4) Run and monitor GitHub Actions workflows, (5) Create and manage gists, (6) Install and manage agent skills, or (7) Perform any GitHub operations via command line.

    • Installs more skills
    • Changes agent settings
    • +1 more
    Pattern check: Nothing flagged

    Apache 2.0 · 1.7k repo stars · Updated 1 Oct 2026

  • telegram

    bubbuild/bub

    Telegram Bot skill for sending and editing Telegram messages via Bot API. Use when Bub needs to: (1) Send a message to a Telegram user/group/channel, (2) Reply to a specific Telegram message with reply_to_message_id, (3) Edit an existing Telegram message, or (4) Push proactive Telegram notifications. Prefer rich formatted messages (headings, lists, tables, blockquotes, math, collapsible details, captioned media) over plain markdown whenever the content is more than one short paragraph.

    • Runs shell commands
    • Reaches the network
    • +2 more
    Pattern check: Nothing flagged

    Apache 2.0 · 1.7k repo stars · Updated 11 Jun 2026