Cresec

How to turn an AI skill into a shared internal tool

By the Cresec team · Published

If you paste the same instructions into Claude or ChatGPT every morning, you already have the beginnings of an internal tool. The useful next step is to give that routine a clear input, a repeatable process and an output a colleague can review.

In this example, a support lead turns a ticket-triage skill into a form the team can use. People paste permitted ticket text and copy the reviewed result into Zendesk. The example needs no connection to a mailbox or help desk.

1. Choose one job with a clear finish

Start with a routine you repeat and can judge. “Help with customer support” is too broad. “Suggest a category and queue for this ticket, explain the choice, and prepare a response from an approved template” gives you something to check.

Write down the boundary before converting the skill:

Job: prepare one support-ticket triage result.
Input: one permitted ticket, confirmed context and a next step.
Output: category, suggested queue, reason and reviewable reply.
Finish: a support agent checks the result and copies it into Zendesk.
Owner: the support lead maintains categories and reply templates.

Leave account lookups, refunds and sending messages out of this first example. Each additional action needs its own purpose, permission and failure behavior.

2. Turn the repeated prompt into an input contract

Separate the facts people supply from instructions everyone shares. Instead of asking colleagues to edit a long prompt, ask for the same fields each time:

Require the fields that affect the result. An empty next step should ask the person to supply one, rather than produce a promise the team has not made. Keep unrelated account records out of the input.

3. Assign fixed steps to code and bounded judgments to AI

The support skill, split into explicit steps
StepHow to handle it
Check required fields and lengthCode checks the input before any model call.
Choose billing, bug, question or reviewAI selects from a declared set; uncertainty goes to review.
Map the category to a queueA fixed table chooses the suggested queue.
Prepare the replyAn approved template uses confirmed fields.
Update Zendesk or email the customerA person reviews and performs the action in this example.

This split makes the routine easier to explain and maintain. A change to the queue map should not require a model to reinterpret your entire support process. AI can still choose the wrong category, so retain the review route.

4. Check exceptions before sharing

Try an ordinary billing question, an unclear request, missing context, a refund request and a ticket containing instructions aimed at the assistant. Decide the expected category, review state and output for each case.

A refund request should reach the named human reviewer; a missing fact should stay missing. Instructions inside a customer message are customer content, not permission to change the process. The support-reply demonstration shows why the distinction matters.

5. Share the tool with an owner and a review boundary

Have a colleague run the same permitted examples without your help. Check that the fields make sense and that the output makes uncertainty visible. Record which version they used and who owns the next change.

If you later connect Zendesk, Gmail or Slack, review each exact read or write, whose account it uses, and how access is revoked. Creating a Gmail draft is an upstream write even when sending remains a separate decision. The IT approval checklist gives that conversation a concrete starting point.

Download the workflow worksheet to record your inputs, decisions, permissions and acceptance cases. Cresec’s approach is skill to internal tool with governance and control: repeatable steps run as code, bounded AI judgments stay explicit, and shared use has an access boundary. Work through the ticket-triage example, or bring one repeated skill to a pilot conversation.

See it fail against a design, not a detector.

One poisoned ticket, two designs of the same routine, and a model assumed fully fooled in both.

Watch the attack fail