btspoony/mstar-harness/skills/mstar-skill-authoring/SKILL.md
mstar-skill-authoring
Morning Star skill authoring and maintenance guidance. Read when creating a new skill, making a major skill rewrite, changing trigger descriptions, evaluating whether behavior-shaping skill text works, or reviewing skill structure before release. This is mstar-native and independent of external skill plugins.
- Source repository stars
- 11
- Declared platforms
- 0
- Static risk flags
- 1
- Last source update
- 2026-08-06
- Source checked
- 2026-08-06
Decision brief
What it does—and where it fits
This skill defines how Morning Star authors, reviews, and validates runtime skills. It is for skill work, not ordinary application implementation.
Not for
- Tasks that require unconfirmed production actions or broad system permissions.
- Environments where the pinned source and install steps cannot be inspected.
Compatibility matrix
Platform support, with evidence labels
| Platform | Status | Evidence | What to check |
|---|---|---|---|
| Codex | Not declared | No explicit evidence | Portability before use |
| Claude Code | Not declared | No explicit evidence | Portability before use |
| Cursor | Not declared | No explicit evidence | Portability before use |
| Gemini CLI | Not declared | No explicit evidence | Portability before use |
Installation
Inspect first. Install second.
The source command is displayed only when detected. A safe inspection prompt is always available so your agent can explain every action before execution.
npx skills add https://github.com/btspoony/mstar-harness --skill "skills/mstar-skill-authoring"Inspect the Agent Skill "mstar-skill-authoring" from https://github.com/btspoony/mstar-harness/blob/48c1aeb08f828ea5ae9ad3d005d7fceca2871f43/skills/mstar-skill-authoring/SKILL.md at commit 48c1aeb08f828ea5ae9ad3d005d7fceca2871f43. List every install step, command, network request, credential, file read/write, external action, and rollback step. Explain whether it fits my task. Do not install or execute anything until I approve.
Workflow
What the source asks the agent to do
- 01
Workflow
The shortest reliable execution path.
The shortest reliable execution path. - 02
Review Template
Use this when reviewing a skill PR:
Use this when reviewing a skill PR: - 03
Skill Review
Trigger contract:
Trigger contract:SSOT alignment:Runtime vs maintenance split: - 04
Load Order
Read mstar-harness-core first. For repository maintenance, also follow root AGENTS.md.
Read mstar-harness-core first. For repository maintenance, also follow root AGENTS.md.When changing existing skills, read every topic skill you touch and any referenced files needed to preserve the single source of truth. Do not rewrite adjacent skills for style only. - 05
Core Practices
This skill defines Morning Star's reusable skill-authoring practices:
Treat skills as process code that should be tested against pressure scenarios.Use frontmatter descriptions as trigger contracts, not process summaries.Keep SKILL.md concise and move heavy detail into references/.
Permission review
Static risk signals and limitations
Reads files
The documentation asks the agent to read local files, directories, or repositories.
Read `mstar-harness-core` first. For repository maintenance, also follow root `AGENTS.md`.Evidence record
Why each signal appears
| Signal | Value | Evidence type | Meaning |
|---|---|---|---|
| Quality score | 87/100 | Computed | Documentation, specificity, maintenance, and trust rules |
| Repository stars | 11 | Source | Repository attention, not individual Skill quality |
| Compatibility | 0 platforms | Source | Declared in the catalog source record |
| Usage guide | automated source guide | Editorial | Generated or reviewed according to the visible evidence level |
Pinned source
Provenance and original SKILL.md
- Repository
- btspoony/mstar-harness
- Skill path
- skills/mstar-skill-authoring/SKILL.md
- Commit
- 48c1aeb08f828ea5ae9ad3d005d7fceca2871f43
- License
- MIT
- Collected
- 2026-08-06
- Default branch
- main
View the original SKILL.md
Morning Star Skill Authoring
This skill defines how Morning Star authors, reviews, and validates runtime skills. It is for skill work, not ordinary application implementation.
Load Order
Read mstar-harness-core first. For repository maintenance, also follow root AGENTS.md.
When changing existing skills, read every topic skill you touch and any referenced files needed to preserve the single source of truth. Do not rewrite adjacent skills for style only.
Core Practices
This skill defines Morning Star's reusable skill-authoring practices:
- Treat skills as process code that should be tested against pressure scenarios.
- Use frontmatter descriptions as trigger contracts, not process summaries.
- Keep
SKILL.mdconcise and move heavy detail intoreferences/. - Prefer concrete trigger symptoms, contexts, and user phrases.
- Verify behavior-changing skill edits with evidence, not wording preference.
It deliberately avoids external path assumptions, external plugin dependencies, and any requirement to run a non-Morning-Star skill as a prerequisite.
Skill Purpose Test
Create or expand a skill only when all are true:
- The behavior should be reused across multiple projects, roles, or tasks.
- The behavior requires judgment or sequencing that is not better enforced by code.
- The existing Morning Star skill tree does not already contain the same rule.
- The trigger can be stated clearly enough for agents to know when to read it.
Do not create a skill for:
- One-off project conventions; put those in project
AGENTS.md. - Mechanical rules that can be linted or scripted.
- A solved incident narrative with no reusable technique.
- Another copy of a rule already owned by an existing
mstar-*skill.
Frontmatter Contract
Required fields:
---
name: mstar-example
description: Use when...
---
Rules:
nameis stable, lowercase, and hyphenated.descriptionis the trigger contract.- Start with the situations that should cause the skill to load.
- Include concrete symptoms, contexts, roles, and artifacts.
- Do not summarize the whole workflow in the description.
- Keep descriptions specific enough to avoid loading on unrelated tasks.
Bad description:
description: Explains how to write plans with steps, tests, commits, and review gates.
Better description:
description: Use when a non-trivial task has a spec or requirements and needs a written implementation plan before code changes.
Why: descriptions are often visible before the body. If the description summarizes the workflow, agents may follow the summary and skip the full skill.
Body Structure
Use this default structure unless the skill has a better local pattern:
# Skill Title
## Load Order
What must be read first, and what owns conflicts.
## Scope
When this applies and what it does not own.
## Workflow
The shortest reliable execution path.
## Decision Rules
Tables or bullets for common branches.
## Evidence
What proves the skill was followed.
## References
Optional files to read only when needed.
Keep SKILL.md focused on the main execution path. Move long examples, templates, schemas, and detailed variants into references/, templates/, or scripts/.
Skill-relative script and asset paths
When a skill ships executables or assets under scripts/ / templates/ / references/, name them as skill → relative path:
- Good: skill
mstar-sdd→scripts/sdd-workspace - Good:
<mstar-sdd>/scripts/sdd-workspace(placeholder for the loaded skill root) - Bad in runtime docs:
skills/mstar-sdd/scripts/sdd-workspaceas if it were a consumer-project cwd path - Bad in shipped rules / CLI notes:
skills/mstar-host/references/…as a consumer cwd path — usemstar-host→references/…(omp may also citeskill://mstar-host/references/…)
Agents discover skills by name; they often miss files when docs present a full repo-relative path and they search that literal string under the app checkout. Resolve the loaded skill directory first, then append scripts/… / references/…. How to resolve differs by host — use mstar-host § Resolve loaded skill root (omp skill://, Cursor plugin checkout under ~/.cursor/plugins/… or .cursor/plugins/…, OpenCode harness-skills/, Codex/Kimi/ZCode plugin mounts). Reserve skills/<name>/… only for harness-repo maintenance notes that explicitly say "from this repository root".
Progressive Disclosure
Use three levels:
- Frontmatter: trigger only.
SKILL.md: core execution path.- Resources: details loaded only for the relevant variant.
If SKILL.md grows large because it covers multiple domains, split by reference file:
skill-name/
SKILL.md
references/
opencode.md
cursor.md
codex.md
The body must tell the reader exactly which reference to open and when.
Trigger Quality Checklist
Before committing a skill change:
- Does the description say when to trigger, not merely what the skill contains?
- Does it include common synonyms and role/task contexts?
- Does it avoid overbroad terms that would load it constantly?
- Does the body define conflict ownership?
- Does it point to one source of truth instead of repeating long rules?
- Does it state the expected evidence for behavior-shaping changes?
Pressure Scenarios
For new skills or major behavior rewrites, write 2-3 pressure prompts that would fail without the skill:
{
"skill_name": "mstar-example",
"evals": [
{
"id": 1,
"prompt": "A realistic task that tempts the agent to violate the intended rule.",
"expected_output": "What compliant behavior looks like.",
"files": []
}
]
}
Good pressure prompts:
- Create the mistake the skill is meant to prevent.
- Mention realistic artifacts and role boundaries.
- Have observable pass/fail criteria.
- Avoid testing trivia from the skill body.
If full eval runs are not practical for the change, record manual evidence: before/after expectation, affected trigger phrase, and one concrete validation step such as search results, link checks, or a dry-run prompt review.
Maintenance Discipline
- Preserve runtime/maintenance split: skills describe runtime behavior; root
AGENTS.mddescribes repository maintenance. - Keep role shells thin; reusable behavior belongs in topic skills or role references.
- Do not introduce parallel manuals for the same workflow.
- Do not rename or split skills without updating role matrices, README tables, host adapters, and install docs.
- Behavior-shaping wording changes need evidence: evals, regressions, concrete user outcomes, or a documented failure mode.
Review Template
Use this when reviewing a skill PR:
## Skill Review
- Trigger contract:
- SSOT alignment:
- Runtime vs maintenance split:
- Progressive disclosure:
- Evidence for behavior change:
- Stale references checked:
- Verdict: Approve | Request Changes | Needs Discussion
Alternatives
Compare before choosing
mission69b/t2000
sui-publish
Publishing, upgrading, and deploying Sui Move packages. Use this skill when the user needs to publish a package, upgrade a published package, deploy to multiple networks, serialize transactions for multisig signing, run a local Sui network (localnet), prepare for Mainnet launch, monitor production deployments, or debug dry run failures. Also use when the user asks about sui client publish, sui client upgrade, UpgradeCap, upgrade policies, Published.toml, --serialize-output, localnet, mainnet lau
ok-helloworld/vibe-pentest
race-condition
Race condition and TOCTOU testing for web apps. Use when testing one-time operations, concurrent HTTP abuse, rate-limit bypass, Turbo Intruder gates, HTTP/2 single-packet attacks, and CWE-362-style synchronization gaps.
K-Dense-AI/scientific-agent-skills
simpy
Build, inspect, test, and analyze bounded process-based discrete-event simulations with SimPy, including events, resources, interrupts, monitoring, replications, warm-up, and reproducible output analysis.
huggingface/skills
hf-cloud-sagemaker-production-defaults
Create a SageMaker endpoint (real-time, real-time scale-to-zero, or async) with autoscaling, CloudWatch alarms, and tagging enabled by default. Use this skill whenever about to create a SageMaker endpoint, write deployment code that calls `create_endpoint`, or finalize a deployment after the image URI and IAM role are known. Provides deploy.py for real-time endpoints, deploy_ic.py for real-time endpoints that scale to zero instances via inference components, and deploy_async.py for async endpoin