aif-skill-generator

Invoke the skill with a name to start an interactive workflow that asks about the problem, target user, and tools needed. It then generates a complete package with valid YAML frontmatter, a body under 500 lines, and optional references, scripts, and templates directories.

Use the scan command with the skill's path. It runs a two-level check: a Python regex scanner detecting known attack patterns like instruction overrides and data exfiltration, plus a semantic review of all files. Skills with critical findings are blocked and can be removed with the cleanup helper.

Yes, Learn Mode activates when you pass one or more URLs. It fetches each page, enriches the material with web searches, synthesizes a knowledge base, asks clarifying questions, and generates a skill with source attribution in the references.

Skill names must be lowercase with hyphens only, maximum 64 characters, no consecutive hyphens, and must match the directory name. Names with uppercase letters, underscores, or leading hyphens fail validation.

Unquoted square brackets in argument-hint break YAML parsing because brackets denote arrays. Wrap the value in quotes, for example argument-hint: "[--flag] <description>", to avoid parse errors and agent TUI crashes.

Blocked skills are not installed. The cleanup-blocked-skill.py helper removes the installed directory after strict path safety validation and patches skills-lock.json to prevent the blocked skill from being resurrected by later installs.