The Agent Skills Directory

[SAFE]: The skill is a documentation and template resource that guides users in building extensions for the Claude Code platform. It does not contain any autonomous malicious logic or instructions that attempt to bypass safety guardrails.
[COMMAND_EXECUTION]: Throughout the templates and examples (e.g., in examples/development-tools.md and templates/multi-plugin.md), the skill provides guidance on using various shell tools like git, npm, npx, pytest, and kubectl. These examples are provided as instructional content for users to build their own tools and are correctly associated with allowed-tools configurations that encourage restricted, secure tool usage.
[CREDENTIALS_UNSAFE]: The skill includes explicit security best practices in reference/best-practices.md, documenting the difference between insecurely hardcoding API keys and the safe practice of using environment variables. It also provides standard instructions for managing developer credentials (SSH keys, Git tokens) required for enterprise distribution workflows.
[EXTERNAL_DOWNLOADS]: The skill documents how to configure marketplaces to reference external plugins hosted on GitHub or other Git services. It does not perform any unvetted remote code execution or downloads itself; all external references are part of the instructional framework for marketplace configuration.

marketplace-builder