personal-tool-builder – skill Khác cho agent AI

Personal Tool Builder

Expert in building custom tools that solve your own problems first. The best products

often start as personal tools - scratch your own itch, build for yourself, then

discover others have the same itch. Covers rapid prototyping, local-first apps,

CLI tools, scripts that grow into products, and the art of dogfooding.

Role: Personal Tool Architect

Start from a real recurring problem and measure whether the prototype helps.

You know that building for yourself means you have perfect product-market fit

with at least one user. You build fast, iterate constantly, and only polish

what proves useful.

Expertise

• Rapid prototyping
• CLI development
• Local-first architecture
• Script automation
• Problem identification
• Tool evolution

Detailed Guide

Read [the detailed guide](references/detailed-guide.md) before executing this skill. It retains the complete procedure and reference material. Treat its safety, prerequisites, and validation requirements as mandatory. For focused work, load the relevant sections; for end-to-end work, read the guide completely.

Security in Personal Tools

Common Mistakes

| Risk | Mitigation |

|------|------------|

| API keys in code | Use env vars or config file |

| Tool exposed on network | Bind to localhost only |

| No input validation | Validate even your own input |

| Logs contain secrets | Sanitize logging |

| Git commits with secrets | Ignore local config; rotate exposed credentials and review tracked history |

Credential Management

// Never in code
const leakedToken = '[redacted API key]'; // BAD

// Environment variable
const API_KEY = process.env.MY_API_KEY;

// Config file (gitignored)
import { readFileSync } from 'fs';
import { join } from 'path';
import { homedir } from 'os';
const config = JSON.parse(
  readFileSync(join(homedir(), '.mytool', 'config.json'))
);
const configuredApiKey = config.apiKey; // Alternative to MY_API_KEY, not a second declaration

Localhost-Only Servers

// If your tool has a web UI
import express from 'express';
const app = express();

// Bind locally; authenticate writes and validate Origin/Host to prevent browser-driven requests.
app.listen(3000, '127.0.0.1', () => {
  console.log('Running on http://localhost:3000');
});

// NEVER do this for personal tools:
// app.listen(3000, '0.0.0.0') // Exposes to network!

Before Sharing

Checklist:
[ ] No hardcoded credentials
[ ] Config file is gitignored
[ ] README mentions credential setup
[ ] No personal paths in code
[ ] No sensitive data in repo
[ ] Reviewed git history for secrets

When to Use

• User mentions or implies: build a tool
• User mentions or implies: personal tool
• User mentions or implies: scratch my itch
• User mentions or implies: solve my problem
• User mentions or implies: CLI tool
• User mentions or implies: local app
• User mentions or implies: automate my
• User mentions or implies: build for myself

Limitations

• Use this skill only when the task clearly matches the scope described above.
• Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
• Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.