المهارات code-craft
📦

code-craft

مراجعة المحتوى r1 حرج 📁 الوصول إلى نظام الملفات🔑 متغيرات البيئة⚙️ الأوامر الخارجية

Build Reliable Code with Durable Principles

Inconsistent engineering choices make code harder to review and maintain. This skill applies clear design, testing, error, and tooling defaults across common languages.

يدعم: Claude Codex Code(CC)
⚠️ 38 ضعيف

التثبيت باستخدام Agent لدي

انسخ هذا الطلب إلى Agent لديك. يتضمن صفحة Skill المعتمدة وملف manifest.

طلب الوكيل
Review the Skillstore skill "code-craft" from https://skillstore.io/skills/jssblck-code-craft.md and its manifest at https://skillstore.io/api/skills/jssblck-code-craft/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

يجب أن يواصل Agent عرض خطته وطلب أي تأكيد تفرضه سياسة الأمان.

موارد مهيّأة لـ Agents

استخدم هذه الروابط عندما يحتاج AI Agent أو crawler أو script إلى سياق نظيف بدلًا من قراءة الصفحة كاملة.

تفاصيل Markdown GET /skills/jssblck-code-craft.md manifest موقَّع GET /api/skills/jssblck-code-craft/manifest lockfile موقَّع GET /api/skills/jssblck-code-craft/lockfile

اختبرها

جارٍ استخدام "code-craft". Review a TypeScript checkout function that accepts untyped request data and throws generic errors.

النتيجة المتوقعة:

  • Parse request data once at the boundary into explicit checkout types.
  • Represent expected failures with a typed result instead of generic exceptions.
  • Add behavior tests for invalid items, missing payment data, and declined payments.

جارٍ استخدام "code-craft". Recommend a Python project quality baseline for a small command-line application.

النتيجة المتوقعة:

  • Use Ruff for formatting and linting, plus strict static type checking.
  • Run formatting, linting, typing, and tests through one shared command.
  • Call the same command from local pre-commit checks and continuous integration.

التدقيق الأمني

حرج
v1 • ٢٣‏/٨‏/٢٠٢٦ فتح التقرير المرتبط بالإصدار

Most static detections are false positives caused by Markdown links, inline code formatting, or explanatory engineering prose. Two installer examples genuinely recommend immediate execution of remote scripts through Bash or PowerShell.

13
الملفات التي تم فحصها
1,583
الأسطر التي تم تحليلها
1
عناصر المراجعة
0
تم تجاهل الإيجابيات الكاذبة

مخاوف أمنية مؤكدة (1)

حرج
principles/new-project-defaults.md:191
Pipe to shell pattern
- `curl -sSfL .../install.sh | bash` (macOS/Linux)
The guide explicitly recommends piping a remotely downloaded installer into Bash. This executes unverified script content before users can inspect or authenticate it, creating a supply-chain execution risk.
عناصر مراجعة القدرات (1)

هذه قدرات محلية حقيقية قد يُتوقع وجودها لهذه المهارة، لذا فهي تتطلب مراجعة ولكن لا تُحتسب كسلوك خبيث مؤكد.

مرتفع
principles/new-project-defaults.md:192
PowerShell invocation
- `irm .../install.ps1 | iex` (Windows PowerShell)
The guide explicitly recommends piping a remote PowerShell response into Invoke-Expression. This directly executes downloaded content without authenticating the installer script first.

عوامل الخطر

📁 الوصول إلى نظام الملفات (6)
languages/python.md:20 languages/rust.md:121 languages/typescript.md:20 principles/new-project-defaults.md:48 principles/new-project-defaults.md:191 principles/new-project-defaults.md:192
🔑 متغيرات البيئة (2)
languages/python.md:88 languages/typescript.md:151
⚙️ الأوامر الخارجية (20)
principles/new-project-defaults.md:192 SKILL.md:19 SKILL.md:22 SKILL.md:39 SKILL.md:45 SKILL.md:48 SKILL.md:57 SKILL.md:61 SKILL.md:63 SKILL.md:65 SKILL.md:82 SKILL.md:90 SKILL.md:99 SKILL.md:112 SKILL.md:122 SKILL.md:123 SKILL.md:124 SKILL.md:125 SKILL.md:133 SKILL.md:139

الأنماط المكتشفة

Pipe to shell pattern
دقّقه: codex
شارك واستشهد بهذا التقرير

شارك تقرير التقييم المرتبط بالإصدار والشارة المحايدة وبطاقة التضمين والاستشهادات. تعرض Skillstore الأدلة من دون أن تقرر ما إذا كانت هذه المهارة آمنة.

فتح التقرير المرتبط بالإصدار
تقييم الأمان

نسخ رابط التقرير

https://skillstore.io/skills/jssblck-code-craft/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

شارة Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/jssblck-code-craft/security.svg)](https://skillstore.io/skills/jssblck-code-craft?utm_source=security_passport_badge)

شارة HTML

<a href="https://skillstore.io/skills/jssblck-code-craft?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/jssblck-code-craft/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

بطاقة قابلة للتضمين

<iframe src="https://skillstore.io/embed/skills/jssblck-code-craft.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
الاستشهادات الأكاديمية (APA · BibTeX · CFF)

اقتباس APA

jssblck. (2026). code-craft security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/jssblck-code-craft/audits/1

اقتباس BibTeX

@techreport{jssblck-jssblck-code-craft-2026, author = {jssblck}, title = {code-craft security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/jssblck-code-craft/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "code-craft security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "jssblck" date-released: "2026-08-23" url: "https://skillstore.io/skills/jssblck-code-craft/audits/1" identifiers: - type: other value: "skillstore:jssblck-code-craft:audit:1" description: "Skillstore immutable audit report identifier"

تقييم Skillstore

سبب هذا التقييم موثوقية الأدلة: منخفض
55
الهندسة المعمارية
85
قابلية الصيانة
87
المحتوى
65
المجتمع
83
الامتثال للمواصفات

ما الذي يمكنك بناؤه

Review a Pull Request

Identify design, error-handling, testing, and maintainability issues with language-specific recommendations.

Refactor a Legacy Module

Replace weak boundaries and primitive values with parsed, explicit domain types.

Bootstrap Project Standards

Select consistent formatting, linting, testing, CI, and governance defaults for a new repository.

جرّب هذه الموجّهات

Check a Function 
Review this [language] function for clear errors, strong types, and simple control flow. Explain the most important changes.
Improve Test Design 
Review these [language] tests. Focus on observable behavior, realistic boundaries, deterministic execution, and unnecessary mocking. Propose specific improvements.
Refactor a Module 
Refactor this [language] module using parsed boundaries, explicit domain types, and errors as values. Preserve behavior and follow existing repository conventions.
Design a Project Baseline 
Design standards for a new [language] project. Include formatting, linting, type checks, tests, CI, pre-commit checks, architecture notes, and release safeguards.

أفضل الممارسات

  • Provide the target language, repository conventions, and relevant code or diff.
  • Ask for behavior preservation and require formatter, type-checker, linter, and test verification.
  • Apply recommendations selectively when established project rules require a different approach.

تجنب

  • Do not request broad rewrites without defining behavior and scope.
  • Do not apply new abstractions before identifying real callers and duplicated needs.
  • Do not treat generated advice as proof that tests, security, or performance are correct.

الأسئلة المتكررة

Which languages receive detailed guidance?
Rust, TypeScript, Go, and Python receive dedicated idioms, tooling, testing, and project-layout guidance.
Can it review existing code?
Yes. It can assess code or diffs against its design, error, testing, and simplicity principles.
Can it scaffold a new project?
It can recommend project defaults and structure, but the coding agent performs the actual file changes.
Does it replace project instructions?
No. Repository instructions and established conventions take precedence over this skill.
Does it run tests and linters?
No. It instructs the coding agent to run the repository tools and report verification results.
Does it guarantee secure code?
No. Its principles can improve boundaries and failure handling, but dedicated security review remains necessary.

تفاصيل المطور

المؤلف

jssblck

الترخيص

MIT

مراجعة Skillstore

r1

تنبيه الإصدار

لم يعلن المؤلف عن إصدار.

المستودع

https://github.com/jssblck/agents/tree/4658295e88faed205cc134edf987f7ea4e0c8ea4/skills/code-craft

مرجع

0139ec01bdea5a1eaac3b0e3c90753dbfe65aaa1

حداثة الصيانة

٢٣‏/٨‏/٢٠٢٦

الاستخدام

0 تنزيلات · 0 مشاهدات

بنية الملفات

📁 agents/

📄 openai.yaml

📁 languages/

📄 go.md

📄 python.md

📄 rust.md

📄 typescript.md

📁 principles/

📄 architecture-docs.md

📄 errors-as-values.md

📄 illegal-states.md

📄 new-project-defaults.md

📄 parse-dont-validate.md

📄 simplicity.md

📄 testing.md

📄 SKILL.md

المزيد من jssblck

عرض الكل

مهارات ذات صلة

عرض الكل