Agent skill · Audited from source
Claude Code Mastery
skill · borghei/Claude-SkillsNOASSERTION licenceAudited 19 Oct 2026 · source 6e3fcbdbb5cf
Is it safe? With care — CAUTION, grade B (88/100). We read this skill's source at commit 6e3fcbdbb5cf and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 8 findings, 0 critical or high. What it does: Use when the user asks to "optimize CLAUDE.md", "create a new skill", "write a custom agent", "configure hooks", "manage context window", "set up MCP servers", "scaffold a skill package", "analyze token budget", "create…
Cite
Cite this page
ModelsAtlas. “Claude Code Mastery (borghei/Claude-Skills)”. Retrieved 19 Oct 2026. https://modelsatlas.com/skills/borghei/claude-code-mastery
Trust audit
Audit 0.4.1 · source read 19 Oct 2026
CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | WARN | 5 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | PASS | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 3 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (8)
MEDIUMInventory / provenanceinv.symlink · .codex/skills/a11y-audit
.codex/skills/a11y-audit
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .codex/skills/ab-test-setup
.codex/skills/ab-test-setup
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .codex/skills/account-executive
.codex/skills/account-executive
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .codex/skills/ad-creative
.codex/skills/ad-creative
- Why
- link not followed
- Fix
- —
MEDIUMInventory / provenanceinv.symlink · .codex/skills/aeo
.codex/skills/aeo
- Why
- link not followed
- Fix
- —
LOWPrompt injectionprompt.authority_framing · assets/agent-template.md:90
Full access: (omit tools entirely to inherit every tool)
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWPrompt injectionprompt.authority_framing · references/subagent-patterns.md:292
### Full Access Agent
- Why
- No further detail recorded for this rule.
- Fix
- —
LOWPrompt injectionprompt.authority_framing · references/subagent-patterns.md:541
You are a senior security engineer performing code review.
- Why
- No further detail recorded for this rule.
- Fix
- —
Audit 0.4.1 · source sha 6e3fcbdbb5cf · 19 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherborghei GitHub userOwner of the repository this skill is read from
- Source folderborghei/Claude-Skills/engineering/claude-code-masteryThe exact folder we audited
- LicenceNOASSERTIONAs the repository states it
- Commit pinned for this verdict6e3fcbdbb5cfA new audit runs when the source changes
- Repository statusNot archivedLast push 12 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Use when the user asks to "optimize CLAUDE.md", "create a new skill", "write a custom agent", "configure hooks", "manage context window", "set up MCP servers", "scaffold a skill package", "analyze token budget", "create…
--- name: claude-code-mastery description: > Use when the user asks to "optimize CLAUDE.md", "create a new skill", "write a custom agent", "configure hooks", "manage context window", "set up MCP servers", "scaffold a skill package", "analyze token budget", "create subagents", "configure permissions", "set up worktrees", or "integrate Claude Code with editors". Covers Claude Code CLI mastery, skill authoring, context engineering, hooks automation, subagent creation, and development workflow optimization. license: MIT metadata: version: 1.1.0 author: borghei category: engineering domain: development-tools updated: 2026-06-17 tags: [claude-code, skill-authoring, subagents, hooks] --- # Claude Code Mastery Expert skill for Claude Code CLI -- CLAUDE.md optimization, skill authoring, subagent creation, hooks automation, and context engineering. **Keywords:** claude-code, claude-cli, CLAUDE.md, skill-authoring, subagents, hooks, context-window, token-budget, MCP-servers, worktrees, permission-modes, prompt-engineering, context-engineering, slash-commands ## Core Capabilities - **CLAUDE.md optimization** — audit, restructure, compress, and hierarchize config files for token efficiency. - **Skill authoring** — scaffold and write discoverable skill packages with correct layout and frontmatter. - **Subagent creation** — write `.claude/agents/<name>.md` files with a `tools` allowlist and a Markdown-body system prompt. - **Hooks automation** — wire `PreToolUse`/`PostToolUse`/`Stop` lifecycle scripts via `.claude/settings.json`. - **Context engineering** — measure and manage the context-window token budget across a codebase. ## When to Use - Authoring, structuring, or optimizing a CLAUDE.md file for any project. - Scaffolding a new skill package or creating a Claude Code subagent. - Configuring hooks for automated quality, security, or workflow steps. - Auditing and reducing context-window consumption. ## Clarify First Before scaffolding or optimizing, confirm these inputs. If any is unknown or vague, ASK — do not assume: - [ ] **Which task** — scaffold a new skill, optimize a CLAUDE.md, create a subagent, or analyze context budget (selects `skill_scaffolder.py` vs `claudemd_optimizer.py` vs `context_analyzer.py`) - [ ] **Target identity** — for a new skill: its name, domain, and one-line description; for optimization: the file or project path (the inputs the scripts require) - [ ] **Token budget** — the target ceiling (sets `--token-limit` and what counts as over-budget) Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact. ## Quick Start ```bash # Scaffold a new skill package python scripts/skill_scaffolder.py my-new-skill --domain engineering --description "Brief description" # Analyze and optimize an existing CLAUDE.md python scripts/claudemd_optimizer.py path/to/CLAUDE.md # Estimate context window usage across a project python scripts/context_analyzer.py /path/to/project # All tools support JSON output python scripts/claudemd_optimizer.py CLAUDE.md --json ``` ## Tools | Tool | Purpose | Command | |------|---------|---------| | `skill_scaffolder.py` | Scaffold a new skill package with correct structure + frontmatter | `python scripts/skill_scaffolder.py my-skill -d engineering --description "Does X"` | | `claudemd_optimizer.py` | Score a CLAUDE.md for structure, tokens, and redundancy with recommendations | `python scripts/claudemd_optimizer.py CLAUDE.md --token-limit 4000` | | `context_analyzer.py` | Estimate context-window consumption by file category with a budget breakdown | `python scripts/context_analyzer.py /path/to/project --max-depth 4` | All tools support `--json`. See **[references/tool-reference.md](references/tool-reference.md)** for full parameter tables and output formats. ## References Load the reference that matches the task — keep this file lean and pull detail on demand: - **[references/workflows.md](references/workflows.md)** — the five numbered playbooks: optimize a CLAUDE.md, author a skill, create a subagent, configure hooks, and manage the context budget. Read when executing any of those tasks step-by-step. - **[references/quick-reference.md](references/quick-reference.md)** — slash commands, permission modes, CLAUDE.md loading order, MCP servers, the troubleshooting table, and success criteria. Read for at-a-glance lookups or when debugging configuration. - **[references/tool-reference.md](references/tool-reference.md)** — full parameter tables and output formats for the three Python tools. Read when scripting the tools or interpreting their JSON output. - **[references/skill-authoring-guide.md](references/skill-authoring-guide.md)** — comprehensive reference for writing effective skills, from YAML frontmatter to structure. Read when authoring a skill in depth. - **[references/subagent-patterns.md](references/subagent-patterns.md)** — guide to creating and using subagents for parallel work and scoped tasks. Read when designing a subagent. - **[references/hooks-cookbook.md](references/hooks-cookbook.md)** — practical hook recipes for code quality, security enforcement, and workflow automation. Read when building hooks. **Templates:** [assets/skill-template.md](assets/skill-template.md), [assets/agent-template.md](assets/agent-template.md) ## Scope & Limitations **This skill covers:** - Authoring, structuring, and optimizing CLAUDE.md files for any project - Scaffolding new skill packages with correct directory layout and frontmatter - Creating and configuring Claude Code subagents with scoped tool access - Analyzing and managing context window token budgets across a codebase **This skill does NOT cover:** - Writing application source code or implementing business logic (see [senior-fullstack](../senior-fullstack/SKILL.md), [senior-backend](../senior-backend/SKILL.md)) - MCP server development or custom transport protocols (see
Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 6e3fcbd
git clone https://github.com/borghei/Claude-Skills git -C Claude-Skills checkout 6e3fcbdbb5cf
The author documents no install command, so this uses the repository directly. Our verdict covers commit 6e3fcbdbb5cf only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
Audit history
Every audit, every source change
- !CAUTION B 88 / 100
first audit · source
6e3fcbdbb5cf
README badge
For maintainers · shows the latest audit
[](https://modelsatlas.com/skills/borghei/claude-code-mastery/)
The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.
Similar skills
All coding & review skills →borghei/Claude-Skills
This skill should be used when the user asks to "check accessibility", "audit WCAG compliance", "scan HTML for a11y issues", "check color contrast", or "find accessibility violations in web pages".
borghei/Claude-Skills
Designs multi-agent system architectures with orchestration patterns, tool schemas, and performance evaluation. Use when building AI agent systems, designing agent workflows, creating tool schemas, or evaluating agent…
borghei/Claude-Skills
Design AI agent communication protocols: MCP tool schemas, A2A, function calling, and inter- agent messaging. Use when building multi-agent systems, defining tool interfaces, or implementing agent-to-agent communication.
borghei/Claude-Skills
Design multi-agent orchestration with workflow DAGs, routing, handoff protocols, and state management. Use when building pipelines of specialized agents, designing fan-out/fan-in patterns, or implementing fault-tolerant…
borghei/Claude-Skills
Multi-agent DAG orchestration for workflows where AI agents collaborate via dependency graphs, covering agent spawning, output merging, and quality evaluation. Use when a task needs multiple specialized agents or to…
borghei/Claude-Skills
Analytics engineering across data modeling, dbt, transformation, and semantic layers. Use when building dbt models, designing star schemas, writing staging or mart SQL, configuring data tests, or optimizing warehouse…
Add this badge to your README
[](https://modelsatlas.com/skills/borghei/claude-code-mastery/)
<a href="https://modelsatlas.com/skills/borghei/claude-code-mastery/"><img src="https://modelsatlas.com/skills/borghei/claude-code-mastery/badge.svg" alt="ModelsAtlas: CAUTION B"></a>
Questions about Claude Code Mastery
What does the Claude Code Mastery skill do?
Is Claude Code Mastery safe to install?
What can Claude Code Mastery access on my machine?
Which assistants does Claude Code Mastery work with?
How current is this page?
Sources
- github.com/borghei/Claude-Skills/tree/main/engineering/claude-co — the audited source at commit 6e3fcbdbb5cf and every finding aboveObserved · 19 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the Claude Code Mastery skill do?
- Is Claude Code Mastery safe to install?
- What can Claude Code Mastery access on my machine?