Crypto Research Skill Creator
Create research skills whose triggers are precise, conclusions are traceable to evidence, and cryptographic claims are not stronger than their proofs or sources.
Scope
Use this meta-skill to create, audit, or refactor a research skill. It defines the skill contract and quality gate; it does not perform the target research task unless the user separately asks for that task.
Keep the core portable across agent harnesses. Do not require a named tool, subagent model, hidden memory, proprietary metadata, or a particular directory outside the skill itself. A harness-specific adapter may be added only as an optional layer.
Required Inputs
Obtain or infer, without blocking on low-risk details:
- representative requests that should and should not trigger the skill;
- the research task, expected deliverables, and intended audience;
- required evidence sources and permitted verification capabilities;
- the relevant cryptographic domain and threat/security model;
- target harness constraints, if any.
If a missing choice would materially change correctness or scope, ask for it. Otherwise state the assumption and continue.
Success Criteria
A finished skill has:
- discriminating trigger metadata and explicit non-trigger boundaries;
- in-scope and out-of-scope work, required inputs, and observable outputs;
- success criteria, failure modes, stopping conditions, and uncertainty behavior;
- domain checks appropriate to its claims, parameters, and complexity measures;
- citation/version verification rules when external sources are used;
- valid relative links, no unfinished scaffold tokens, and no silent harness dependency;
- an audit result with blocking, major, and minor findings.
Failure Modes
Stop or downgrade the result when required evidence cannot be inspected, a citation cannot be verified, notation or parameters are under-specified, or the requested conclusion exceeds the available proof. Never fill gaps with plausible-looking references, theorem details, security reductions, parameter values, or novelty claims.
When a capability is unavailable, report exactly what was not verified and provide only the safe partial result. “Not verified” is a valid outcome; fabricated certainty is not.
Workflow
- Select a mode: create, audit, or refactor.
- Read design-principles.md to define the trigger, scope, contract, structure, and portability boundary.
- Read crypto-research-conventions.md whenever the skill handles papers, proofs, reductions, security claims, ZKPs, lattices, parameters, complexity, citations, or novelty.
- For creation, instantiate skill-template.md, remove irrelevant sections, and keep conditional detail in focused references.
- For audit or refactor, preserve correct user choices and observable interfaces. Change only what a concrete finding justifies.
- Apply validation-checklist.md. Resolve all blocking findings; disclose unresolved major findings.
- Run
python scripts/validate_skill.py PATH when Python is available. Treat it as a structural check, not a substitute for domain review.
- Return the skill directory plus a concise audit report: verdict, evidence checked, changes made, unresolved risks, and unverified items.
Research-Integrity Invariants
- Label definitions, assumptions, conjectures, theorem statements, proof sketches, complete proofs, reductions, empirical observations, and engineering heuristics distinctly.
- A theorem's mathematical conclusion is not automatically an end-to-end protocol security claim.
- A proof sketch is not a checked proof; a machine-readable artifact is not machine-verified unless a checker was actually run successfully.
- State security notions, adversary powers, setup/model assumptions, parameter regime, and reduction loss before asserting security.
- Keep symbolic complexity, concrete cost, communication, memory, preprocessing, amortization, and failure probabilities separate.
- Verify bibliographic identity and claim support before citing a source. Never invent authors, titles, venues, identifiers, quotations, or theorem numbers.
- Treat novelty as a bounded search conclusion, not a fact. Use wording such as “no earlier result was found within the searched sources and dates,” together with search coverage and limitations.
Output Contract
For create, return a ready-to-copy skill folder and a validation report. For audit, return findings before suggested edits. For refactor, return the revised folder, a change summary, preserved behaviors, and remaining risks.
Use the examples only as structural guides:
- theorem-review
- literature-search
1---2name: crypto-research-skill-creator3description: Use when creating, auditing, or refactoring reusable agent skills for cryptography, zero-knowledge proofs, lattice research, theorem review, security claims, or citation-sensitive literature work.4---56# Crypto Research Skill Creator78Create research skills whose triggers are precise, conclusions are traceable to evidence, and cryptographic claims are not stronger than their proofs or sources.910## Scope1112Use this meta-skill to create, audit, or refactor a research skill. It defines the skill contract and quality gate; it does not perform the target research task unless the user separately asks for that task.1314Keep the core portable across agent harnesses. Do not require a named tool, subagent model, hidden memory, proprietary metadata, or a particular directory outside the skill itself. A harness-specific adapter may be added only as an optional layer.1516## Required Inputs1718Obtain or infer, without blocking on low-risk details:1920- representative requests that should and should not trigger the skill;21- the research task, expected deliverables, and intended audience;22- required evidence sources and permitted verification capabilities;23- the relevant cryptographic domain and threat/security model;24- target harness constraints, if any.2526If a missing choice would materially change correctness or scope, ask for it. Otherwise state the assumption and continue.2728## Success Criteria2930A finished skill has:3132- discriminating trigger metadata and explicit non-trigger boundaries;33- in-scope and out-of-scope work, required inputs, and observable outputs;34- success criteria, failure modes, stopping conditions, and uncertainty behavior;35- domain checks appropriate to its claims, parameters, and complexity measures;36- citation/version verification rules when external sources are used;37- valid relative links, no unfinished scaffold tokens, and no silent harness dependency;38- an audit result with blocking, major, and minor findings.3940## Failure Modes4142Stop or downgrade the result when required evidence cannot be inspected, a citation cannot be verified, notation or parameters are under-specified, or the requested conclusion exceeds the available proof. Never fill gaps with plausible-looking references, theorem details, security reductions, parameter values, or novelty claims.4344When a capability is unavailable, report exactly what was not verified and provide only the safe partial result. “Not verified” is a valid outcome; fabricated certainty is not.4546## Workflow47481. Select a mode: **create**, **audit**, or **refactor**.492. Read [design-principles.md](references/design-principles.md) to define the trigger, scope, contract, structure, and portability boundary.503. Read [crypto-research-conventions.md](references/crypto-research-conventions.md) whenever the skill handles papers, proofs, reductions, security claims, ZKPs, lattices, parameters, complexity, citations, or novelty.514. For creation, instantiate [skill-template.md](references/skill-template.md), remove irrelevant sections, and keep conditional detail in focused references.525. For audit or refactor, preserve correct user choices and observable interfaces. Change only what a concrete finding justifies.536. Apply [validation-checklist.md](references/validation-checklist.md). Resolve all blocking findings; disclose unresolved major findings.547. Run `python scripts/validate_skill.py PATH` when Python is available. Treat it as a structural check, not a substitute for domain review.558. Return the skill directory plus a concise audit report: verdict, evidence checked, changes made, unresolved risks, and unverified items.5657## Research-Integrity Invariants5859- Label definitions, assumptions, conjectures, theorem statements, proof sketches, complete proofs, reductions, empirical observations, and engineering heuristics distinctly.60- A theorem's mathematical conclusion is not automatically an end-to-end protocol security claim.61- A proof sketch is not a checked proof; a machine-readable artifact is not machine-verified unless a checker was actually run successfully.62- State security notions, adversary powers, setup/model assumptions, parameter regime, and reduction loss before asserting security.63- Keep symbolic complexity, concrete cost, communication, memory, preprocessing, amortization, and failure probabilities separate.64- Verify bibliographic identity and claim support before citing a source. Never invent authors, titles, venues, identifiers, quotations, or theorem numbers.65- Treat novelty as a bounded search conclusion, not a fact. Use wording such as “no earlier result was found within the searched sources and dates,” together with search coverage and limitations.6667## Output Contract6869For **create**, return a ready-to-copy skill folder and a validation report. For **audit**, return findings before suggested edits. For **refactor**, return the revised folder, a change summary, preserved behaviors, and remaining risks.7071Use the examples only as structural guides:7273- [theorem-review](examples/theorem-review/EXAMPLE.md)74- [literature-search](examples/literature-search/EXAMPLE.md)75