SONUB
EN English 한국어 日本語 中文 हिन्दी বাংলা اردو Español Português Français Deutsch Русский العربية Bahasa Indonesia Tiếng Việt ไทย Türkçe

How to enable notifications

Notifications are unavailable in this browser or on this address. Try a supported browser on the secure SONUB site.

If notifications are blocked, allow them in your browser settings.

  1. Open the site controls beside the address bar, or your browser’s site settings. Set Notifications for this site to Allow.
  2. In your device settings, allow notifications for your browser and check Do Not Disturb or Focus.
  3. Return to SONUB, reload the page, and use the bell to enable notifications.

On iPhone or iPad, add SONUB to your Home Screen, open it there, then allow notifications.

Agent Skills

Teach your AI agent new skills — in one minute

Free skills made by SONUB for Claude Code, Codex, Gemini CLI, GitHub Copilot CLI and other AI agents. Install them with one command, then just ask in plain words.

Advanced — bigger skills: files, scripts, options, tests and safety

When one SKILL.md is not enough: split it into files the reads only when needed, hand fixed jobs to scripts, use frontmatter options, test the before you trust it, and check other people's skills before you install them.

Split it into files — read only what is needed

The agent reads a skill in three steps: the name and description at the start, SKILL.md when it uses the skill, and other files only when needed. So big material goes into separate files, and SKILL.md becomes the map that says which file to read for which question.

  • SKILL.md holds the overview and "for this, read that file".
  • Link files only from SKILL.md, one level deep. Chains like file → file → file are often read only in part.
  • Put a table of contents at the top of reference files longer than 100 lines.
  • Name files by their content (finance.md, not doc2.md) and always write paths with / .
sql-report/
sql-report/
├── SKILL.md              ← the map: what to read for which question
├── references/
│   ├── finance.md        ← read only for revenue questions
│   └── sales.md          ← read only for sales questions
└── scripts/
    └── check_query.py    ← run it, do not read it
SKILL.md
## Which file to read
- Revenue, billing → read [references/finance.md](references/finance.md)
- Deals, pipeline → read [references/sales.md](references/sales.md)

Scripts — put work that must be the same every time in code

A ready-made script is more reliable than the agent writes each time, and when it runs, only its output enters the , not the code. Put checks, conversions and other work that must be exact in scripts/.

  • Say clearly whether to run it ("Run scripts/check_query.py") or to read it ("See scripts/check_query.py for the rules").
  • Handle errors inside the script, and print messages that say what is wrong and what to do.
  • Write down the packages and versions it needs, and put real requirements in compatibility.
  • Build a loop: check → fix → check again, and go on only after the check passes.
  • Explain fixed values with a comment (why a 30-second timeout?).
SKILL.md
## Check the query before you run it

Run:
    python3 scripts/check_query.py query.sql

It prints OK, or one problem per line.
If it is not OK, fix the query and run the check again.
Run the query only after you see OK.

Which languages can run depends on the agent. Python, Bash and JavaScript are the common choices.

Frontmatter options — the standard and each tool's extras

Besides name and description, the standard has a few optional fields, and each tool adds its own. Tools ignore fields they do not know, so make the skill work with the standard fields first.

  • Standard: license, compatibility (needed programs and network, up to 500 characters), metadata (author and so on), allowed-tools (pre-approved tools — experimental).
  • Claude Code disable-model-invocation: true — only you can call it. Use it for jobs with side effects, such as deploying or sending messages.
  • Claude Code user-invocable: false — only the AI uses it, and it is hidden from the / menu. context: fork runs the skill in a subagent.
  • Claude Code !`command` — runs the command before the skill is read and puts the output in its place (for example !`git diff HEAD`).
  • Codex: policy → allow_implicit_invocation: false in agents/openai.yaml — the skill is used only when you call $<skill-name>.
.claude/skills/deploy/SKILL.md
---
name: deploy
description: Deploys the app to staging or production. Use when the user says deploy, release or ship.
license: MIT
compatibility: Requires git, docker and network access
metadata:
  author: my-team
allowed-tools: Bash(git status) Bash(./scripts/deploy.sh *)
# Claude Code only — other tools ignore these
disable-model-invocation: true
argument-hint: "[staging|production]"
---

Current branch: !`git branch --show-current`

Deploy to $ARGUMENTS with `./scripts/deploy.sh $ARGUMENTS`.

Give allowed-tools only the commands the skill really needs. Wide permissions make a mistake more costly.

Testing — write the tests before you write a lot

You only know whether a skill works by trying it. First see what the agent gets wrong without the skill, then write just enough to fix that.

  1. Give the agent the job without the skill and note what it gets wrong or misses.
  2. Make at least three test requests for those gaps — including one where the skill must not be used.
  3. Write only enough instructions to fill the gaps.
  4. In a new session, try the same requests with and without the skill and compare.
  5. Test with every model you will use — a small model may need more detail.
Terminal
# checks the frontmatter and the naming rules
skills-ref validate ./commit-message
evals.json (your own format)
[
  {"query": "write a commit message for what I staged", "use_skill": true},
  {"query": "commit this, it fixes the login bug",      "use_skill": true},
  {"query": "explain what git rebase does",             "use_skill": false}
]

skills-ref is the reference tool in the agentskills repository (for demonstration) — clone it and install it with pip install -e . In Claude Code, /skill-doctor shows each skill's context cost and use.

Safety — read other people's skills like code

A skill is a set of instructions the agent follows, and its scripts run on your computer. A bad skill makes the agent follow bad instructions, so check before you install.

  • Install only from places you trust. With -l you see the list without installing.
  • Before you install, read SKILL.md and every file in scripts/.
  • Watch for commands that send files or keys somewhere else, or that delete things.
  • Do not put passwords or keys in a skill. Read them from environment variables.
  • Claude Code: block a skill with a permission rule such as Skill(deploy *), and turn off !`command` with the disableSkillShellExecution setting.
Terminal
# see what is inside before you install
npx skills add my-name/my-skills -l

# read the instructions and every script
cat .agents/skills/<name>/SKILL.md
ls .agents/skills/<name>/scripts/

Your own skills too: read the changes once more before you commit or share them.

Advanced practice — grow your skill

  1. Move the long part of your intermediate skill into references/ and link it from SKILL.md.
  2. Write one check in scripts/ and add the "check → fix → check again" steps to SKILL.md.
  3. Run skills-ref validate on the skill folder and fix what it reports.
  4. Make three test requests (one where the skill must not be used) and compare with and without the skill.
  5. Read one skill made by someone else from start to end before you install it.

When you have done all five, move on to the [Master] tab.

Official documentation

Checked against the official documentation on 2026-10-18. These tools change often — if a command fails, see the official docs.

Guidelines

AI

Certificate

Study

Vibe Coding

Game

Practice

Teachers

Chat

Forum

Create

Community

More

Glossary

Pick a word you don't know. You'll see a simple explanation and related terms.

No matching term yet.

Pick a term to see its explanation.