build-skill

Create a focused directory containing a SKILL.md file with YAML frontmatter defining a name and description, then add optional scripts, references, or templates. Follow the workflow of checking for duplicates, writing narrow trigger wording, and verifying with the skills-runtime test suite.

SKILL.md requires YAML frontmatter with a name and description field. The name uses lowercase letters, digits, and hyphens, and the description should state what EVA uses the skill for, including trigger wording.

Delete a skill when it sends messages or money actions without an approval gate, requires plaintext credentials, duplicates another skill, depends on private framework paths, or encourages unapproved production deploys and destructive commands.

Run the skills-runtime test suite from the apps/eva-core directory using npm test with the skills-runtime.spec.ts file. Also verify frontmatter validity, relative references, and risk language before shipping.

Skills must preserve org_id tenant boundaries, never expose secrets, and require explicit approval before external writes, destructive actions, production changes, money actions, messaging, installs, or credential changes, per the Runtime Skill Policy.