Askit build settings

Skill product-on-purpose/agent-skills-toolkit/skills/askit-build-settings

Toolkit and Standard for building, grading, and scaling cross-agent skill libraries (Claude Code + Codex) to a tiered Bronze/Silver/Gold quality bar.

Install

npx -y skills add product-on-purpose/agent-skills-toolkit --skill askit-build-settings

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Creates and improves a plugin's settings and permissions per target and recommends least-privilege allowlists. Use when authoring settings, scoping permissions, wiring environment variables, or registering hooks in settings.

SKILL.md

2.2 KB, as published. Nobody here has run it

askit-build-settings

Purpose

Author and improve a plugin's settings and permissions, following the builder pattern (../../docs/reference/builder-pattern.md). create scaffolds the settings per target (Claude Code settings.json - permissions, env, hook registration; Codex config.toml for the subset it supports); improve tightens an existing one. It also folds in permission advice: recommend the least-privilege allowlist a plugin needs, never broader (Standard sec 9). Recipe and the permission rubric are in references/settings-recipe.md.

When to use

When authoring settings, scoping permissions, wiring environment variables, or registering hooks in settings.

create mode

Read what the plugin actually needs (which tools, which paths, which env, which hooks).
Scaffold the settings per target: Claude Code settings.json (a permissions allow/deny set, env, and hooks registration); Codex config.toml for the subset it supports.
Apply least privilege: the allowlist grants only what a component uses; secrets go through env indirection, never committed (sec 9).

improve mode

Read the current settings and the components; remove any granted permission no component uses, and tighten an over-broad matcher.

permission advice

For a given component or plugin, recommend the minimal allowlist (the narrowest tool set and path scope it needs) and flag any over-grant. This is the permission-advisor role, folded in as a mode rather than a separate skill.

Scope

Settings are partly cross-agent: Claude Code settings.json is the rich surface; Codex config.toml supports a subset. Least privilege and secret hygiene are Universal security rules (sec 9). Hook authoring itself is askit-build-hook; this skill wires a hook's registration entry. Status line registration is askit-build-statusline.